Skip to content

Support Embedded Auth Server alongside AWS STS token exchange#50

Merged
tgrunnagle merged 4 commits intomainfrom
embedded-as-with-aws-sts_2026-03-06
Apr 7, 2026
Merged

Support Embedded Auth Server alongside AWS STS token exchange#50
tgrunnagle merged 4 commits intomainfrom
embedded-as-with-aws-sts_2026-03-06

Conversation

@tgrunnagle
Copy link
Copy Markdown
Contributor

@tgrunnagle tgrunnagle commented Mar 6, 2026

RFC to support running the embedded authorization server alongside the AWS STS token exchange middleware.

@tgrunnagle tgrunnagle marked this pull request as ready for review March 6, 2026 17:00
@tgrunnagle tgrunnagle requested a review from jhrozek March 6, 2026 17:01
@tgrunnagle tgrunnagle requested a review from jhrozek April 6, 2026 16:42
jhrozek
jhrozek previously approved these changes Apr 7, 2026
Copy link
Copy Markdown
Contributor

@jhrozek jhrozek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it would be nice to reframe the top-level proposal and problem introduction so that it's clear the RFC is not just about AWS STS and perhaps use a more generic and extensible way of referring to the external auth config. But neither needs to be done now, I'm acking the RFC so you can merge and go forward if you feel like these are too nitty,

- use `TypedLocalObjectReference`
- generalize RFC to be about "dedicated auth server reference"
- add e2e tests implementation phase
@tgrunnagle tgrunnagle merged commit 06cf378 into main Apr 7, 2026
1 check passed
@tgrunnagle tgrunnagle deleted the embedded-as-with-aws-sts_2026-03-06 branch April 7, 2026 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants