BC5 OAuth: resource-first discovery, device-flow login, RFC 8707 resource echo - #582

Draft

jeremy wants to merge 9 commits into

mainfrom

Commits on Jul 28, 2026

auth: adopt resource-first OAuth discovery and RFC 8628 device flow
jeremy
committed
auth: cover device flow, discovery fallbacks, and refresh behavior
jeremy
committed
docs: describe device-flow login and retire client.json references
jeremy
committed
auth: harden device display boundary; cover profile --device-code mapping
jeremy
committed
go: drop stale SDK pseudo-version go.sum entries left by restack
jeremy
committed
auth: persist and echo the RFC 8707 resource indicator across refreshes
jeremy
committed
auth: canonicalize the resource origin; restack onto keyring-probe main
jeremy
committed
go: pin the SDK at oauth-resource-indicator 819c0b86
jeremy
committed
go: pin the SDK at oauth-resource-indicator e9469832
jeremy
committed