Normalize canonical inbound grants - #6473

Merged

jhrozek merged 14 commits into

mainfrom

spiffe-integration-split3-3

Sep 5, 2026

Commits on Sep 4, 2026

Normalize canonical inbound grants
jhrozek
committed
f83e9b7
Stop nesting a phantom issuer-only actor in the act claim
jhrozek
committed
d2b327f
Reject private_key_jwt registration with token exchange disabled
jhrozek
committed
f0f350d
Register static SPIFFE clients
jhrozek
committed
bd00e0c
Harden static client registration
jhrozek
committed
e0d4d75
Hide configured back-channel clients
jhrozek
committed
f8ed890
Close remaining client-registration and replay-forwarding gaps
jhrozek
committed
1c2bb57
Make outbound DCR cache population race-safe across replicas
jhrozek
committed
47a852a
Fix CIMD client renewal broken by create-only registration
jhrozek
committed
571f021
Reject an already-expired authoritative DCR credential
jhrozek
committed
319de92
Enforce SPIFFE resources independently of audiences
jhrozek
committed
7ff760b
Merge client fingerprint comparison into one type
jhrozek
committed
bc524ed
Include resources in the SPIFFE placeholder fingerprint
jhrozek
committed
bcb58e0

Commits on Sep 5, 2026

Fingerprint SPIFFE association identity
jhrozek
committed
d2d311d