SEP-2350: scope-accumulation check in auth/scope-step-up#282

Merged

pcarleton merged 16 commits into

mainfrom

sep-2350-scope-union-on-reauth

May 19, 2026

Commits on May 18, 2026

Add SEP-2350 scope-accumulation check to auth/scope-step-up
localden
committed

Commits on May 19, 2026

feat: add client conformance tests for SEP-2575 (#270)
anubhav756
authored
fix(sep-2243): collapse check IDs to one-per-requirement (#287)
pcarleton
authored
feat: `sdk` subcommand to run local conformance against any SDK ref (#277)
pcarleton
authored
feat: add SEP conformance traceability manifest (#288)
pcarleton
authored
feat: add server conformance tests for SEP-2575 (#271)

Yuan325
and
pcarleton
authored
SEP-2352: authorization-server migration scenario (#286)

localden
and
pcarleton
authored
ci(traceability): enable corepack so the SDK build can use pnpm (#289)
pcarleton
authored
ci(traceability): tolerate SDK conformance failures in the run step (#290)
pcarleton
authored
chore: refresh SEP traceability manifest (typescript-sdk@main) (#291)
github-actions[bot]
authored
Make scopesSupported disjoint from challenge scopes so the SEP-2350 union check can't be satisfied by scopes_supported ∪ challenge
pcarleton
committed
SEP-837: application_type check in DCR registration (#284)

localden
and
pcarleton
authored
Merge main into sep-2350-scope-union-on-reauth
pcarleton
committed
Merge main into sep-2350-scope-union-on-reauth (#284 SEP-837)
pcarleton
committed
feat: add conformance tests for iss parameter (SEP-2468) (#220)

max-stytch
and
pcarleton
authored
Merge main into sep-2350-scope-union-on-reauth (#220 SEP-2468)
pcarleton
committed