giles 20ba152e36 identity: wire refresh into oauth + e2e flow tests (Phase 2 complete, +3 tests) ...

exchange now issues an access+refresh pair (RFC 6749 §4.1.4/§5.1) via
token.sx issue_grant; added the refresh grant (§6) delegating to token
rotation. End-to-end: code-exchange → refresh → introspect (active),
refresh-token reuse rejected (invalid_grant), and revoke-then-refresh
blocked by grant cascade. oauth 17/17, 65/65.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 00:35:10 +00:00

..

api.sx

identity: service facade api.sx — login/verify/revoke/logout (10 tests, Phase 1 complete)

2026-06-07 00:00:05 +00:00

oauth.sx

identity: wire refresh into oauth + e2e flow tests (Phase 2 complete, +3 tests)

2026-06-07 00:35:10 +00:00

registry.sx

identity: session registry — route by id and (subject, client) + SSO fan-out (9 tests)

2026-06-06 23:55:34 +00:00

session.sx

identity: session-as-process — create/lookup/expire/revoke + idle timeout (11 tests)

2026-06-06 23:45:50 +00:00

token.sx

identity: refresh-token rotation + cascading revocation (token.sx grant-centric, +9 tests)

2026-06-07 00:26:05 +00:00