v0.1.7 OAuth clients contract

Tunnellio v0.1.7

Summary

• This release aligns the shipped version number, documentation, and release artifacts to 0.1.7.
• It includes the live OAuth Authorization Code + PKCE client flow and validated release packaging.
• The client works with the real server-side OAuth contract and includes corrected token refresh persistence behavior.

Highlights

• Live OAuth Authorization Code + PKCE flow through oauth-login, oauth-refresh, and oauth-introspect.
• Discovery and protected-resource metadata support aligned with the real server contract.
• Refresh flow preserves the previous refreshToken when the server omits a new one.

Artifacts

• tunnellio.exe
• tunnellio-source-v0.1.7.zip
• tunnellio-windows-x64-v0.1.7.zip

Usage notes

• The server remains the source of truth for final authMode and connectionMode.
• For saved OAuth sessions, use --token-name or --token-file with the OAuth commands.

Changelog

• Aligned the client with the new discovery, auth, and session contract.
• Added OAuth discovery helpers, protected-resource metadata loading, PKCE utilities, and extended session-aware planning/runtime metadata.
• Added live-validated session lifecycle handling with resume-token aware heartbeat, resume, and close calls.
• Expanded config, runtime snapshots, tests, and docs for the new server contract.

Notes for GitHub publication

• Upload the binary and zip from this release subfolder.
• Version corrected to 0.1.7.
• Commit: eb0612eebc23d1f1088cc8e2ccd603691211e6b5