refactor(auth): canonical go-oidc + oauth2 OIDC flow + CTF hardening - #39

Merged

AYDEV-FR merged 14 commits into

mainfrom

fix/auth-ctf-hardening

Jun 20, 2026

Commits on Jun 5, 2026

fix(auth): harden OIDC flow against CTF-grade probing
AYDEV-FR
committed

Commits on Jun 10, 2026

Commits on Jun 11, 2026

fix(auth): keep token-exchange/verify error detail server-side
AYDEV-FR
committed
chore(lint): migrate golangci-lint config to v2 + fix repo-wide findings
AYDEV-FR
committed

Commits on Jun 12, 2026

fix(auth): don't fatal when the IdP already advertises public endpoints
AYDEV-FR
committed

Commits on Jun 20, 2026

fix(auth): close encoded-backslash open-redirect + tidy callback findings
AYDEV-FR
committed