Rework the DCR OAuth client model: per-AS reuse, picker isolation, GC#1276

Open

RhysSullivan wants to merge 18 commits into

mainfrom

fix/dcr-oauth-client-model

Commits on Jul 2, 2026

Add origin_issuer to oauth_client for per-AS DCR identity
RhysSullivan
committed
Reuse DCR clients per authorization server instead of re-registering
RhysSullivan
committed
Deterministic DCR slugs; thread issuer through probe and connect paths
RhysSullivan
committed
Record originIntegration on manual OAuth clients
RhysSullivan
committed
Hide DCR clients from the app picker; group manual apps by intent then domain
RhysSullivan
committed
Render the two-tier picker and an auto-registered clients section
RhysSullivan
committed
Extract DCR client classification and add deterministic reuse ordering
RhysSullivan
committed
GC dead DCR oauth_client rows on local boot; backfill survivors' issuer
RhysSullivan
committed
GC dead DCR oauth_client rows on cloud via a code migration
RhysSullivan
committed
Use Button for the auto-registered clients toggle
RhysSullivan
committed
Guard the DCR root-domain collision end to end
RhysSullivan
committed
Guard the OAuth app picker against unparseable endpoint URLs
RhysSullivan
committed
Never reuse a resource-scoped DCR client for a resource-less request
RhysSullivan
committed
Key DCR registrable domains off the full PSL via tldts
RhysSullivan
committed
Count DCR connection references in one grouped query, not per row
RhysSullivan
committed
Use Collapsible for the auto-registered clients section
RhysSullivan
committed
Document origin_issuer's dual meaning on oauth_client
RhysSullivan
committed

Commits on Jul 3, 2026

Escape the NUL separator so the cloud GC migration isn't binary
RhysSullivan
committed