Support actor_token in RFC 8693 token exchange - #6331

Merged

jhrozek merged 9 commits into

stacklok:mainfrom

jhrozek:token-delegation-4-actor-token

Aug 17, 2026

Commits on Aug 17, 2026

Support actor_token and id_token in RFC 8693 token exchange
jhrozek
committed
38a1f10
Remove orphaned token-delegation design-note docs
jhrozek
committed
8afef06
Add real kind e2e coverage for actor_token exchange
jhrozek
committed
7415320
Bind actor_token to client_id, not sub, in token exchange
jhrozek
committed
6b68f9e
Reject id_token as a token-exchange subject_token_type
jhrozek
committed
458be5a
Document actor_token/id_token behavior in token exchange arch doc
jhrozek
committed
55a94c3
Address token exchange review feedback
jhrozek
committed
e538664
Drain actor token error response
jhrozek
committed
cfbe482
Separate authenticated client identity from asserted actor
jhrozek
committed
aec1464