cziegeler opened a new pull request, #49: URL: https://github.com/apache/sling-org-apache-sling-auth-oauth-client/pull/49
Improves both developer-facing docs with clearer guidance and additional detail. **AGENTS.md** - Add `@ProviderType` / experimental API warning callout - Mention `OidcAuthCredentials` in the SPI list - Add `make sling-run` shortcut to core commands - Clarify OIDC metadata-vs-explicit-config constraint - Add OIDC logout hardening note (`logoutRedirectAllowedHosts` requirement) - Tighten integration-test description (Keycloak 26.4, Redis via Testcontainers) - Add gotcha: local Keycloak version (20.0.3) differs from IT version (26.4) - Remove trailing blank line at end of file **README.md** - Add project layout section with annotated directory tree - Note Docker requirement inline with `mvn verify` command - Add single-test run examples (`-Dtest=` / `-Dit=`) - Mention optional PKCE support (`pkceEnabled`) - Clarify OIDC config mutual-exclusivity wording - Add Redis optional-at-runtime note - Add `make sling-run` alternative in quick-start steps - Add Security section linking to the Sling threat model Co-authored-by: Maia <maia@noreply> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
