Summary
OAuth consumers can now configure provider-specific authorization-request policy without encoding it into the provider endpoint. AuthProxy preserves framework-owned correlation, callback, and PKCE values and carries the same configuration through Aspire.
Added
- Configurable OAuth authorization-request parameters for direct and Aspire provider registration, with framework-owned collision protection. (#106)
Changed
- Canonical OAuth sessions now require reauthentication when configured or effective authorization parameters change. (#106)
- Repository AI quality gates now target AuthProxy and use the canonical prompt and agent corpus.