🔐 feat: OIDC Bearer Token Authentication for Remote Agent API#12450

Merged

danny-avila merged 32 commits intodanny-avila:devfrom

SpectralOne:feature/remote-agent-auth

May 4, 2026

Commits on Apr 29, 2026

Remote Agent Auth middleware

SpectralOne
authored and
danny-avila
committed
consider migration and update user

SpectralOne
authored and
danny-avila
committed
fix eslint errors

SpectralOne
authored and
danny-avila
committed
add scope validation

SpectralOne
authored and
danny-avila
committed
fix codex review errors

SpectralOne
authored and
danny-avila
committed
add filter for use: sig

SpectralOne
authored and
danny-avila
committed
add jwks-rsa deps

SpectralOne
authored and
danny-avila
committed
Fix remote agent OIDC auth review findings
danny-avila
committed
Polish remote agent OIDC timeout coverage
danny-avila
committed
Reject remote OIDC tokens without subject
danny-avila
committed
Use tenant context for remote agent auth config
danny-avila
committed
Harden remote agent OIDC scope handling
danny-avila
committed

Commits on May 2, 2026