Server-side multi-scope flow & scope policy evaluation#4179

Open

stevenvegt wants to merge 10 commits into4144-2-authzen-clientfrom

4144-4-server-side-flow

Commits on Apr 15, 2026

Commits on Apr 16, 2026

Rename presentationDefinitionForScope to findCredentialProfile

stevenvegt
and
claude
committed
Enforce profile-only scope policy in server-side token handler

stevenvegt
and
claude
committed
Add test for passthrough scope policy

stevenvegt
and
claude
committed
Explicitly derive granted scopes from scope policy

stevenvegt
and
claude
committed
Expose AuthZen evaluator through PDPBackend interface

stevenvegt
and
claude
committed
Implement dynamic scope policy via AuthZen PDP

stevenvegt
and
claude
committed
Add dynamic scope policy tests: partial denial, profile denial, PDP error

stevenvegt
and
claude
committed
Apply self-review fixes

stevenvegt
and
claude
committed