feat(proxy): bind static credentials to provider endpoints - #2510

Open

johntmyers wants to merge 44 commits into

mainfrom

fix/static-credential-endpoint-binding

Commits on Aug 9, 2026

feat(proxy): bind static credentials to provider endpoints
johntmyers
committed
2e32588
test(e2e): verify static credential endpoint isolation
johntmyers
committed
271ad76
docs(provider): explain static credential endpoint binding
johntmyers
committed
025f3d6
fix(e2e): use valid endpoint isolation fixtures
johntmyers
committed
12f380a
docs(provider): explain static credential endpoint binding
johntmyers
committed
5f1957a
fix(credentials): preserve binding identity across rotations
johntmyers
committed
3226457
fix(proxy): enforce bindings across request lifecycle
johntmyers
committed
b6b2b82
fix(proxy): close credential relay gaps
johntmyers
committed
afaf003
docs(credentials): clarify binding failure behavior
johntmyers
committed
6725c2d
fix(credentials): hash selected provider profile scope
johntmyers
committed
0f701f7
fix(proxy): resolve credentials after request admission
johntmyers
committed
279cb41
docs(credentials): clarify binding failure diagnostics
johntmyers
committed
a33d6d0
fix(proxy): align single-route credential denials
johntmyers
committed
c6b14e7
fix(credentials): harden endpoint-bound rotation
johntmyers
committed
b8f6316
fix(credentials): enforce identity and authority binding
johntmyers
committed
e2eb64b

Commits on Aug 10, 2026

fix(credentials): snapshot provider environment atomically
johntmyers
committed
082165f
test(e2e): include authority port in query proxy requests
johntmyers
committed
8ead9ed
fix(credentials): close credential revocation gaps
johntmyers
committed
203be0a
docs(proxy): explain authority mismatch diagnostics
johntmyers
committed
8ab4c8f
fix(credentials): enforce binding lifecycle invariants
johntmyers
committed
dd75dd0
fix(provider): reject credential config collisions
johntmyers
committed
c93b7dd
fix(network): capture credential scope atomically
johntmyers
committed
42ff95d
fix(network): distinguish origin and absolute targets
johntmyers
committed
ba979ab
fix(provider): isolate endpointless profile credentials
johntmyers
committed
b5d50a2
fix(network): normalize IPv6 request authorities
johntmyers
committed
960d882
docs(credentials): clarify endpointless profile isolation
johntmyers
committed
eb0307d
feat(policy): bind endpointless provider credentials
johntmyers
committed
761518f
fix(credentials): use current GCP placeholder revision
johntmyers
committed
ff0260b
docs(providers): explain policy credential bindings
johntmyers
committed
758307c
test(credentials): cover endpointless fail-closed invariant
johntmyers
committed
524cd7b
test(policy): expect ambiguity rejection at creation
johntmyers
committed
da3f44e
test(server): authenticate rebased policy requests
johntmyers
committed
c01b2e4
refactor(proxy): share credential mismatch finding builder
johntmyers
committed
212d22d
test(credentials): cover malformed binding metadata
johntmyers
committed
9c60c86
test(credentials): verify multi-key endpoint isolation
johntmyers
committed
a176e2c
test(e2e): cover same-host credential path denial
johntmyers
committed
e0ac1b0
docs(credentials): document serialized refresh contract
johntmyers
committed
9de1ab1
refactor(proxy): consolidate L7 log formatting
johntmyers
committed
bcf713a
perf(credentials): precompile endpoint binding patterns
johntmyers
committed
1b21351
perf(credentials): share identity epoch revisions
johntmyers
committed
bf3a81f
test(proxy): require explicit request default ports
johntmyers
committed
2c85001
fix(policy): validate SigV4 credential sources
johntmyers
committed
29e7927
fix(credentials): preserve endpoint bindings for credential handles
johntmyers
committed
43ff639
feat(go-sdk): expose network credential bindings
johntmyers
committed
284120c