Phil Skentelbery 6bb2a4033f feat(token): implement GET /token for token verification ...

Implements W3C IndieAuth Section 6.3 token verification endpoint.
The token endpoint now supports both:
- POST: Issue new tokens (authorization code exchange)
- GET: Verify existing tokens (resource server validation)

Changes:
- Added GET handler to /token endpoint
- Extracts Bearer token from Authorization header (RFC 6750)
- Returns JSON with me, client_id, scope
- Returns 401 with WWW-Authenticate for invalid tokens
- 11 new tests covering all verification scenarios

All 533 tests passing. Resolves critical P0 blocker for v1.0.0.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-11-25 08:10:47 -07:00

..

e2e

feat(token): implement GET /token for token verification

2025-11-25 08:10:47 -07:00

integration

feat(token): implement GET /token for token verification

2025-11-25 08:10:47 -07:00

security

feat(deploy): merge Phase 5a deployment configuration

2025-11-21 19:16:54 -07:00

unit

feat(token): implement GET /token for token verification

2025-11-25 08:10:47 -07:00

__init__.py

chore: initialize gondulf project structure

2025-11-20 10:42:10 -07:00

conftest.py

feat(auth): implement response_type=id authentication flow

2025-11-22 12:23:20 -07:00