Alternative: XAA as OAuthClientProvider with Layer 2 utilities#1531

Draft

pcarleton wants to merge 13 commits intomainfrom

paulc/xaa-as-provider

Commits on Feb 13, 2026

Reimplement XAA as OAuthClientProvider with Layer 2 utilities
pcarleton
committed
Remove leftover artifacts from middleware approach
pcarleton
committed
DRY up crossAppAccess options: extend RequestJwtAuthGrantOptions via Omit
pcarleton
committed
Extract NonInteractiveOAuthProvider base class to DRY up M2M providers
pcarleton
committed
Use Zod schema + parseErrorResponse for token exchange validation
pcarleton
committed
Move JagTokenExchangeResponseSchema to core/shared/auth.ts with other OAuth schemas
pcarleton
committed
Remove silent idpUrl fallback: fail explicitly if discovery yields no token_endpoint
pcarleton
committed