feat: mint access tokens with the negotiated scope - #28237

Draft

BobbyHo wants to merge 10 commits into

plat479-3-report-negotiated-scopefrom

plat480-1-apply-negotiated-scope

Commits on Aug 25, 2026

feat(coderd): mint OAuth2 tokens with the negotiated scope
BobbyHo
committed
98545a6
test(coderd/oauth2provider): cover the negotiated scope end to end

BobbyHo
and
claude
committed
641e45e
feat(coderd/oauth2provider): report the granted scope in token responses
BobbyHo
committed
1a30a9c
refactor(coderd/oauth2provider): clarify the unmintable scope sentinel
BobbyHo
committed
8b46823
test(coderd/oauth2provider): derive the exchange query from authorizeQuery
BobbyHo
committed
da5b590
docs: scope the OAuth2 refresh limitation to narrowing
BobbyHo
committed
fc6eb77
docs(coderd): trim the negotiated scope comments
BobbyHo
committed
589b8b8

Commits on Aug 27, 2026