Repository navigation

feat(auth): request a product-area scope bundle at login, step up only for sensitive scopes - #317

Merged

jpage-godaddy merged 8 commits into

godaddy:mainfrom

nverbos-godaddy:feat/auth-login-scope-bundle

Oct 12, 2026

Merged

feat(auth): request a product-area scope bundle at login, step up only for sensitive scopes#317
jpage-godaddy merged 8 commits into
godaddy:mainfrom
nverbos-godaddy:feat/auth-login-scope-bundle

Commits on Oct 12, 2026
- feat(auth): request a product-area scope bundle at login, step up only for sensitive scopes
  
  nverbos-godaddy
  and
  claude
  committed
  3808d65
- feat(shopping): make catalog browsing a login default, step up only for checkout
  
  nverbos-godaddy
  and
  claude
  committed
  09a4cfe
- docs(auth): state the step-up-only rule as applied
  
  nverbos-godaddy
  and
  claude
  committed
  d15130f
- fix(auth): address review findings on the login scope bundle
  
  nverbos-godaddy
  and
  claude
  committed
  652cef2
- refactor(auth): derive the login scopes from the registry's default flags
  
  nverbos-godaddy
  and
  claude
  committed
  3da29f0
- docs(auth): stop steering users and agents to pre-grant the sensitive scopes
  
  nverbos-godaddy
  and
  claude
  committed
  f57f6e7
- docs(auth): write scope comments for future readers, not the change
  
  nverbos-godaddy
  and
  claude
  committed
  e2ebb49
- Merge remote-tracking branch 'origin/main' into feat/auth-login-scope-bundle
  nverbos-godaddy
  committed
  9e29023