Repository navigation

SN/I certificate over mTLS Proof-of-Possession (exportable PFX/PEM) - #938

Open

Robbie-Microsoft wants to merge 30 commits into

mtls-popfrom

rginsburg/sni-mtls-pop

Open

SN/I certificate over mTLS Proof-of-Possession (exportable PFX/PEM)#938
Robbie-Microsoft wants to merge 30 commits into
mtls-popfrom
rginsburg/sni-mtls-pop

Commits on Jul 7, 2026
- Add SNI certificate support over mTLS Proof-of-Possession
  
  Robbie-Microsoft
  and
  Copilot
  committed
  dd4f13a
Commits on Jul 8, 2026
- Use SN/I-allow-listed app for mTLS PoP e2e tests
  
  Robbie-Microsoft
  and
  Copilot
  committed
  81c3eb7
- Enumerate key-bound ATs on sign-out and account removal
  
  Robbie-Microsoft
  and
  Copilot
  committed
  224a003
- Fail closed on mTLS PoP token_type downgrade; honor verify; lock session build
  
  Robbie-Microsoft
  and
  Copilot
  committed
  02ccacb
- Isolate key/ext-bound ATs unconditionally; normalize verify=None
  
  Robbie-Microsoft
  and
  Copilot
  committed
  51adcec
- Address review comments on mTLS PoP cert/key handling
  
  Robbie-Microsoft
  and
  Copilot
  committed
  ba697e8
Commits on Jul 30, 2026
- Harden mTLS PoP e2e: prove token at resource + naming matrix
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b79166d
- Strengthen X509->Bearer e2e: assert cert binding is absent
  
  Robbie-Microsoft
  and
  Copilot
  committed
  aaf62c1
- Note _call_graph_with_mtls_pop_token is shared with FIC #939
  
  Robbie-Microsoft
  and
  Copilot
  committed
  fec7d7f
- Split mtls_pop/Bearer e2e by region (drop regional PoP cell)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b9233c6
- Merge origin/dev into sni-mtls-pop (resync #938 with base)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  4ec592f
Commits on Oct 9, 2026
- Merge origin/dev into sni-mtls-pop
  Robbie-Microsoft
  committed
  e226f92
Commits on Oct 21, 2026
- Merge origin/dev into sni-mtls-pop
  
  Robbie-Microsoft
  and
  Copilot
  committed
  077f11f
Commits on Oct 22, 2026
- Address mTLS PoP review comments
  
  Robbie-Microsoft
  and
  Copilot
  committed
  0424c53
- Add downstream mTLS binding context
  
  Robbie-Microsoft
  and
  Copilot
  committed
  d3a120c
Commits on Oct 23, 2026
- Fix mTLS cache isolation and transport compatibility
  
  Robbie-Microsoft
  and
  Copilot
  committed
  9e35a33
- Fix mTLS cache compatibility and transport review findings
  
  Robbie-Microsoft
  and
  Copilot
  committed
  e574edd
- Avoid cache persistence reentry and quadratic migration cleanup
  
  Robbie-Microsoft
  and
  Copilot
  committed
  6f34f2e
- Reject mixed-case raw mTLS token types before cache lookup
  
  Robbie-Microsoft
  and
  Copilot
  committed
  2de965f
- Reject redirects in the owned mTLS token transport
  
  Robbie-Microsoft
  and
  Copilot
  committed
  dd07393
- Fail required certificate E2E scenarios on missing lab configuration
  
  Robbie-Microsoft
  and
  Copilot
  committed
  1fceb2f
- Fix certificate fixture regression when release tag is unset
  
  Robbie-Microsoft
  and
  Copilot
  committed
  f67c680
Commits on Oct 27, 2026
- Relocate core mTLS parity fixtures and cache scaling regressions
  
  Robbie-Microsoft
  and
  Copilot
  committed
  a447ee5
- Close default E2E transports across core and shared client layouts
  
  Robbie-Microsoft
  and
  Copilot
  committed
  3186192
- Keep actual-client cleanup regression portable to shared transports
  
  Robbie-Microsoft
  and
  Copilot
  committed
  1876aac
- Sanitize real transport failures in shared mTLS E2E helpers
  
  Robbie-Microsoft
  and
  Copilot
  committed
  7e14c4f
- Sanitize recorder validation and remove equal legacy token copies
  
  Robbie-Microsoft
  and
  Copilot
  committed
  4206e32
Commits on Nov 2, 2026
- Harden mTLS credential snapshots and live-test contracts
  
  Robbie-Microsoft
  and
  Copilot
  committed
  c587a89
- Defer PFX chain verification while retaining one credential snapshot
  
  Robbie-Microsoft
  and
  Copilot
  committed
  ddb0280
- Retire original access token records when modify changes identity
  
  Robbie-Microsoft
  and
  Copilot
  committed
  230a4cd

Commits

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Commits on Jul 30, 2026

Commits on Oct 9, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 27, 2026

Commits on Nov 2, 2026