refactor(be,fe): data-only OpenID providers with on-demand SSO discovery/JWKS caches#4022

Open

sea-snake wants to merge 12 commits into

mainfrom

feat/openid-sso-cache-verify

Commits on Jun 15, 2026

feat(be): data-only OpenID providers + on-demand SSO discovery/JWKS caches

sea-snake
and
claude
committed
refactor(be): single read/prefetch split, drop dead OIDC registry, fix comments

sea-snake
and
claude
committed
feat(fe): canister-side SSO discovery + delegation poll for on-demand caches

sea-snake
and
claude
committed
test(fe): update SSO e2e fixture comment for canister-side discovery

sea-snake
and
claude
committed
fix(be): verify OpenID credential before the storage borrow in registration

sea-snake
and
claude
committed
test(be): discover_sso allowlist integration tests + api helpers

sea-snake
and
claude
committed
fix(fe): thread SSO discovery domain through the 1-click authorize flow

sea-snake
and
claude
committed