2 Commits

Author SHA1 Message Date
2a9cec75ef
fix(jwt): accept JSON array for SpaceDelimited scope claim
Some issuers (e.g. PaperOS) emit `scope` as a JSON array (`[]` or
`["openid","profile"]`) instead of the RFC 6749 space-delimited string.
SpaceDelimited.UnmarshalJSON now accepts both forms; a JSON array
is converted to the equivalent slice. Other non-string, non-array
values still return an error.

Adds test cases: array_values and array_empty.
2026-03-26 16:59:11 -06:00
26bdc0a3db
ref!(auth/jwt): full modern rewrite 2026-03-17 07:49:53 -06:00