feat(32.1-02): expand OAuth MCP scopes from the published catalog

- Publish the compiled member-token catalog as pact.MemberTokenScopeCatalog
- Imply declared names only when the MCP subject has a ClientID
- Reject a bad Implies and the reserved names backend and offline_access
This commit is contained in:
2026-10-28 15:01:04 +01:00
parent a1b78b80f5
commit 25fd981d7f
5 changed files with 305 additions and 24 deletions

2
go.mod
View File

@@ -180,4 +180,4 @@ require (
gorm.io/driver/postgres v1.6.3 // indirect
)
replace git.golem15.com/golem15/summercms => ../../../../summercms.go
replace git.golem15.com/golem15/summercms => ../summercms.go