Help developers integrate delegated authorization without accepting a token intended for another service. Build local authorization and resource fixtures, follow metadata discovery, bind authorization to the requested resource, and check audience and scope at the server. Export reusable validation middleware and a redacted explanation of rejected requests.
Proposed milestones
- Model the client, issuer and resource identities
- Discover metadata and bind a proof-key authorization flow
- Reject wrong audiences and insufficient scopes
- Integrate middleware and export redacted decisions
This is an upstream project brief; an implementation and completion tests are not supplied.