feat: add OAuth 2.0 authentication via bl auth login oauth#23

Merged

23prime merged 16 commits intomainfrom

feature/oauth-login

Mar 9, 2026

Commits on Mar 9, 2026

fix: use CSPRNG for OAuth state generation
23prime
committed
fix: correct percent_decode for multi-byte UTF-8 and use char-safe masking
23prime
committed
fix: loop TCP callback to skip non-OAuth requests; strengthen state test
23prime
committed
docs: document bl auth login oauth command and OAuth token storage
23prime
committed
feat: add OAuth 2.0 authentication via bl auth login oauth
23prime
committed
fix: correct command name to bl auth login-oauth in docs
23prime
committed
fix: make generate_state fallible with anyhow instead of panicking
23prime
committed
fix: correct OAuth app registration path in login prompt
23prime
committed
fix: propagate OAuth refresh failures instead of swallowing them
23prime
committed
fix: surface keyring delete errors in delete_oauth_tokens; use ? in oauth_file_set
23prime
committed
docs: use 127.0.0.1 in redirect URI examples; add --no-banner note; expand keyring fallback
23prime
committed
fix: use direct URL for OAuth app registration instead of navigation path
23prime
committed
fix: set finite connect/request timeouts on all HTTP client builders
23prime
committed
fix: handle OAuth denial/error callbacks with proper HTML response and clear error message
23prime
committed
feat: show auth method in auth status output
23prime
committed
feat: show masked client secret and storage backend in OAuth auth status
23prime
committed