fix(client): validate discovered AS metadata by document shape, not well-known path - #2734

Open

claude[bot] wants to merge 7 commits into

mainfrom

fix/2733-oauth-discovery-schema-by-document

Commits on Aug 28, 2026

fix(client): validate discovered AS metadata by document shape, not well-known path
claude
committed
06f0c1a
fix: address review round 1 — validate preserved fields, keep discovery diagnosable
claude
committed
2f71bde
fix: address review round 2 — path-independent sanitization, safe introspection_endpoint
claude
committed
c62a78c
fix: address review round 3 — drop invalid optional fields, never strip validated ones
claude
committed
ca75d57
fix: address review round 4 — one uniform field policy, explicit types, JSDoc
claude
committed
95d81ce
fix: apply the field policy to the deprecated discoverOAuthMetadata path
claude
committed
a55e373
fix: sanitize the deprecated discovery path too; record the behavior deltas in the migration guide
claude
committed
2112499