feat(auth)!: establish secure remote transport boundaries - #94

Open

riccardomenegazzo wants to merge 19 commits into

sysdiglabs:mainfrom

riccardomenegazzo:feat/secure-remote-trust-boundary

Commits on Sep 24, 2026

feat(auth)!: establish secure remote transport boundaries

riccardomenegazzo
authored and
tembleking
committed
245ae86
fix(auth): address remote boundary review findings

riccardomenegazzo
authored and
tembleking
committed
f851af0
fix(auth): bind sessions and bound JWKS refreshes
riccardomenegazzo
committed
f164a5b
chore(auth): remove unused principal helper
riccardomenegazzo
committed
2b93772
Harden JWT identity and JWKS refresh handling
riccardomenegazzo
committed
cc9fa38
Bind remote MCP sessions to verified principals
riccardomenegazzo
committed
d7fc33c
Apply principal-bound sessions across remote transports
riccardomenegazzo
committed
38bd55b
Preserve stdio HTTP compatibility while tightening remote URLs
riccardomenegazzo
committed
076cd2a
Cover principal extraction and array scope claims
riccardomenegazzo
committed
9043c00
Test session ownership and OAuth CORS behavior
riccardomenegazzo
committed
7cf9532
Cover stdio on-prem HTTP compatibility
riccardomenegazzo
committed
ea1bcc9
Avoid parsing unused scope claims
riccardomenegazzo
committed
5b6f7b8
Fail closed when session principal context is missing
riccardomenegazzo
committed
67896ae
fix(auth): converge remote session and JWKS hardening
riccardomenegazzo
committed
c390528
Respect sessionless Streamable HTTP modes
riccardomenegazzo
committed
66085f3
Bind sessions only for stateful remote transports
riccardomenegazzo
committed
d89d1f5
Cover sessionless Streamable HTTP behavior
riccardomenegazzo
committed
135af14
Allow server lifecycle to parse bound session IDs
riccardomenegazzo
committed
39548e5
Assert sessionless requests complete successfully
riccardomenegazzo
committed
15c041a

Navigation Menu

feat(auth)!: establish secure remote transport boundaries - #94

feat(auth)!: establish secure remote transport boundaries#94
riccardomenegazzo wants to merge 19 commits into
sysdiglabs:mainfrom
riccardomenegazzo:feat/secure-remote-trust-boundary

Commits on Sep 24, 2026

feat(auth)!: establish secure remote transport boundaries

fix(auth): address remote boundary review findings

fix(auth): bind sessions and bound JWKS refreshes

chore(auth): remove unused principal helper

Harden JWT identity and JWKS refresh handling

Bind remote MCP sessions to verified principals

Apply principal-bound sessions across remote transports

Preserve stdio HTTP compatibility while tightening remote URLs

Cover principal extraction and array scope claims

Test session ownership and OAuth CORS behavior

Cover stdio on-prem HTTP compatibility

Avoid parsing unused scope claims

Fail closed when session principal context is missing

fix(auth): converge remote session and JWKS hardening

Respect sessionless Streamable HTTP modes

Bind sessions only for stateful remote transports

Cover sessionless Streamable HTTP behavior

Allow server lifecycle to parse bound session IDs

Assert sessionless requests complete successfully