Fix Device Code session propagation and OIDC claims - #1108

Merged

vharseko merged 19 commits into

OpenIdentityPlatform:masterfrom

dairoca90:debug-16.1.2

Sep 29, 2026

Commits on Aug 24, 2026

Add OIDC support to Device Code flow and persist session information for token generation
ss
committed
869773e
remove tests logs
ss
committed
331b22d
remove tests logs
ss
committed
8bf1fff
change refresh token if secuence
ss
committed
53915bb
Avoid session restoration in Device Code/Authorization flow
ss
committed
49dc4d6
Remove unused session state from Device Code
ss
committed
0b6803f
Prioritize Device Code authentication claims
ss
committed
604c674
add amr and acr funcionallity to stateful tokens
ss
committed
011bf6a
git commit -m "fix(oauth2): map auth modules to configured AMR values in stateless tokens" \
ss
committed
5572c75
test(oauth2): add AMR mapping coverage for stateless tokens
ss
committed
04eaaed
remove set session
ss
committed
82d2808

Commits on Aug 28, 2026

restore tests for authModules compability
ss
committed
2229caa

Commits on Aug 31, 2026

remove compatibility code for authModules and amr claims
ss
committed
18c2807

Commits on Sep 4, 2026

fix(oauth2): delete device code only after successful token response
ss
committed
8ed9530
refactor(oauth2): consolidate device code authorization logic
ss
committed
8dd6430
test: add coverage for device code authorization and safe deletion
ss
committed
14916e1

Commits on Sep 26, 2026

fix(oauth2): delete expired device codes
ss
committed
fdfb951
fix(oauth2): propagate device code auth context to refresh tokens
ss
committed
ea9bab7
fix(oauth2): guard access token lookup in session validation
ss
committed
9c1a755