feat(backend): add experimental OAuth token exchange for OAuth applications by wyattjoh · Pull Request #10762 · clerk/javascript

refactor(backend): align OAuth token exchange helpers with endpoint conventions

wyattjoh

committed

20daa4c

refactor(backend): base OAuthTokenExchangeError on ClerkError

wyattjoh

committed

6466a61

fix(backend): require actorToken and actorTokenType together in OAuth token exchange

wyattjoh

committed

2731e25

refactor(backend): narrow experimental OAuth token exchange params to what Clerk supports

wyattjoh

committed

c430897

refactor(backend): require clientSecret for experimental OAuth token exchange

wyattjoh

committed

bb80008

refactor(backend): exchange OAuth tokens with client credentials and publishable key

wyattjoh

committed

78d1ddf

fix(backend): reject malformed token-exchange responses

wyattjoh

committed

89ad6e8

fix(backend): validate token-exchange resource before any request

wyattjoh

committed

39c1920

Merge branch 'wyattjoh/clrk-79-resource' into wyattjoh/backend-oauth-token-exchange

wyattjoh

committed

84c888e

fix(backend): reject invalid token-exchange scope elements

wyattjoh

committed

e74b32d

docs(backend): document token-exchange validation contract

wyattjoh

committed

0f54836

fix(backend): reject non-RFC 3986 token-exchange resources

wyattjoh

committed

d340537

Navigation Menu

Repository navigation

feat(backend): add experimental OAuth token exchange for OAuth applications - #10762

feat(backend): add experimental OAuth token exchange for OAuth applications#10762
wyattjoh wants to merge 15 commits into
mainfrom
wyattjoh/backend-oauth-token-exchange

Commits on Nov 10, 2026

feat(backend): add experimental OAuth application token exchange

feat(backend): throw typed errors from experimental OAuth token exchange

feat(backend): support public clients in experimental OAuth token exchange

Commits on Nov 11, 2026

refactor(backend): align OAuth token exchange helpers with endpoint conventions

refactor(backend): base OAuthTokenExchangeError on ClerkError

fix(backend): require actorToken and actorTokenType together in OAuth token exchange

refactor(backend): narrow experimental OAuth token exchange params to what Clerk supports

refactor(backend): require clientSecret for experimental OAuth token exchange

refactor(backend): exchange OAuth tokens with client credentials and publishable key

fix(backend): reject malformed token-exchange responses

fix(backend): validate token-exchange resource before any request

Merge branch 'wyattjoh/clrk-79-resource' into wyattjoh/backend-oauth-token-exchange

fix(backend): reject invalid token-exchange scope elements

docs(backend): document token-exchange validation contract

fix(backend): reject non-RFC 3986 token-exchange resources