Christian Nuss d55963b7ff fix: include oidc-auth-request-extra-params in token cache key (#1497) ...

The token cache key computation did not include the AuthRequestExtraParams
values from the --oidc-auth-request-extra-params flag. This caused tokens
with different extra parameters (e.g., different audience values) to
incorrectly share the same cache entry.

Changes:
- Add AuthRequestExtraParams field to tokencache.Key struct
- Add AuthRequestExtraParams() method to GrantOptionSet to extract
  extra params from whichever grant option is set
- Update get_token.go to include extra params in cache key
- Add comprehensive tests for cache key differentiation

Fixes #1496

2026-03-01 10:33:54 +09:00

..

cmd

Remove deprecated flag --oidc-redirect-url-authcode-keyboard (#1452)

2025-11-24 21:20:31 +09:00

credentialplugin

Infer apiVersion from KUBERNETES_EXEC_INFO environment variable (#1162)

2024-11-03 17:21:25 +09:00

di

Support Client Credentials Flow (#1231)

2025-06-16 14:16:58 +09:00

infrastructure

Lock token cache file before authentication (#1126)

2024-09-21 14:54:32 +09:00

jwt

Migrate to mockery packages feature (#1124)

2024-08-17 12:27:13 +09:00

kubeconfig

Migrate to mockery packages feature (#1124)

2024-08-17 12:27:13 +09:00

oidc

Fix #1479: Recognize path from redirect url in callback server (#1480)

2026-03-01 10:12:58 +09:00

pkce

Use PKCE verifier of oauth2 package (#1340)

2025-05-19 18:51:43 +09:00

testing

Migrate to mockery packages feature (#1124)

2024-08-17 12:27:13 +09:00

tlsclientconfig

Migrate to mockery packages feature (#1124)

2024-08-17 12:27:13 +09:00

tokencache

fix: include oidc-auth-request-extra-params in token cache key (#1497)

2026-03-01 10:33:54 +09:00

usecases

fix: include oidc-auth-request-extra-params in token cache key (#1497)

2026-03-01 10:33:54 +09:00