Skip to content

Conversation

@ByteBaker
Copy link

Overview

Implements RFC 7591 OAuth 2.0 Dynamic Client Registration Protocol, allowing clients to register dynamically at runtime via HTTP API.

What this PR does / why we need it

  • POST /register endpoint for client registration
  • Request/response types compliant with RFC 7591
  • Support for both confidential and public clients (PKCE)
  • Optional authentication via initial access token
  • Default values per RFC spec (grant_types, response_types, etc.)
  • Validation of grant types and response types
  • Discovery endpoint includes registration_endpoint field

Implements RFC 7591 OAuth 2.0 Dynamic Client Registration Protocol,
allowing clients to register dynamically at runtime via HTTP API.

Features:
- `POST /register` endpoint for client registration
- Request/response types compliant with RFC 7591
- Support for both confidential and public clients (PKCE)
- Optional authentication via initial access token
- Default values per RFC spec (`grant_types`, `response_types`, etc.)
- Validation of grant types and response types
- Discovery endpoint includes `registration_endpoint` field

Signed-off-by: ByteBaker <[email protected]>
@ByteBaker ByteBaker force-pushed the feat/dynamic-client-registration branch from ef33e87 to fcedca4 Compare October 17, 2025 18:36
@ByteBaker ByteBaker closed this Nov 27, 2025
@ByteBaker ByteBaker deleted the feat/dynamic-client-registration branch November 27, 2025 04:37
@ByteBaker ByteBaker restored the feat/dynamic-client-registration branch January 5, 2026 09:35
@ByteBaker ByteBaker reopened this Jan 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant