feat(security): explicit security scheme contract, API key extraction, and plugin validation - #32

Merged

rian-be merged 21 commits into

developmentfrom

area/security-schemes

Sep 11, 2026

Commits on Sep 9, 2026

Feat: Add missing security scheme types
rian-be
committed
5b6d238
Feat: Adjust scheme mapping and package config
rian-be
committed
db332dd
test(security): add security-scheme tests and update package
rian-be
committed
c10a58d

Commits on Sep 11, 2026

refactor(openapi): add plugin contract and scheme validation
rian-be
committed
1d4c667
test(security): prevent OAuth2 and OpenID Connect enum aliasing
rian-be
committed
7925c73
test(security): add host and plugin security scheme tests
rian-be
committed
d83a9b2
refactor(security): stabilize auth scheme enums and metadata
rian-be
committed
dd69b2b
feat(security): support JSON and form API key extraction
rian-be
committed
edc6bfa
feat(security): introduce API key extraction pipeline
rian-be
committed
35fefd9
feat(security): add API key extraction and plugin validation
rian-be
committed
3fe9973
feat(security): add security scheme ADRs and OpenAPI mapper
rian-be
committed
8325c98
Merge remote-tracking branch 'origin/development' into area/security-schemes
rian-be
committed
df5d9b1
feat(security): separate scheme identity from credential field name
rian-be
committed
65f469d
feat(security): resolve scheme per request and fail closed on invalid credentials
rian-be
committed
b150128
fix(build): allow rollForward to latest 10.0 feature band in Docker
rian-be
committed
5c2d8d0
fix(security): resolve IApiKeyValidator lazily to avoid 500s on every request
rian-be
committed
fe5b1d7
Potential fix for pull request finding 'CodeQL / Log entries created from user input'

rian-be
and
github-advanced-security[bot]
authored
a9d2324
Potential fix for pull request finding 'CodeQL / Call to 'System.IO.Path.Combine' may silently drop its earlier arguments'

rian-be
and
github-advanced-security[bot]
authored
eeeb388
fix for finding 'CodeQL / Generic catch clause'

rian-be
and
github-advanced-security[bot]
authored
2190bc7
Potential fix for pull request finding 'CodeQL / Generic catch clause'

rian-be
and
github-advanced-security[bot]
authored
ea43c79
Potential fix for pull request finding 'CodeQL / Generic catch clause'

rian-be
and
github-advanced-security[bot]
authored
ffefa52

Navigation Menu

Uh oh!

feat(security): explicit security scheme contract, API key extraction, and plugin validation - #32

feat(security): explicit security scheme contract, API key extraction, and plugin validation#32
rian-be merged 21 commits into
developmentfrom
area/security-schemes

Commits on Sep 9, 2026

Feat: Add missing security scheme types

Feat: Adjust scheme mapping and package config

test(security): add security-scheme tests and update package

Commits on Sep 11, 2026

refactor(openapi): add plugin contract and scheme validation

test(security): prevent OAuth2 and OpenID Connect enum aliasing

test(security): add host and plugin security scheme tests

refactor(security): stabilize auth scheme enums and metadata

feat(security): support JSON and form API key extraction

feat(security): introduce API key extraction pipeline

feat(security): add API key extraction and plugin validation

feat(security): add security scheme ADRs and OpenAPI mapper

Merge remote-tracking branch 'origin/development' into area/security-schemes

feat(security): separate scheme identity from credential field name

feat(security): resolve scheme per request and fail closed on invalid credentials

fix(build): allow rollForward to latest 10.0 feature band in Docker

fix(security): resolve IApiKeyValidator lazily to avoid 500s on every request

Potential fix for pull request finding 'CodeQL / Log entries created from user input'

Potential fix for pull request finding 'CodeQL / Call to 'System.IO.Path.Combine' may silently drop its earlier arguments'

fix for finding 'CodeQL / Generic catch clause'

Potential fix for pull request finding 'CodeQL / Generic catch clause'

Potential fix for pull request finding 'CodeQL / Generic catch clause'