Skip to content

dbeaver/pro#11275 Add account binding to OAuth access tokens - #30

Open
alexander-skoblikov wants to merge 1 commit into
develfrom
dbeaver/pro#11275-sso-dynamic-mcp-client-registration
Open

alexander-skoblikov wants to merge 1 commit into
develfrom
dbeaver/pro#11275-sso-dynamic-mcp-client-registration

Conversation

@alexander-skoblikov

@alexander-skoblikov alexander-skoblikov commented Nov 2, 2026 •

Copy link
Copy Markdown
Member

Closes dbeaver/pro#11275

Summary

  • Add an optional signed account_id claim to verified access identities.
  • Preserve the existing identity constructor for callers without account binding.
  • Reject malformed account claims and cover bound/unbound tokens with regression tests.
  • Merge current devel while preserving the verified-claims API.

Base

Validation

  • SSO API tests passed as part of the aggregate Maven verification.
  • git diff --check passed.

@alexander-skoblikov
alexander-skoblikov force-pushed the dbeaver/pro#11275-sso-dynamic-mcp-client-registration branch from c0ac927 to 69ef494 Compare November 3, 2026 09:37
@alexander-skoblikov
alexander-skoblikov changed the base branch from dbeaver/pro#11124-sso-refresh-tokens to devel November 3, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant