Phil Skentelbery 6bb2a4033f feat(token): implement GET /token for token verification ...

Implements W3C IndieAuth Section 6.3 token verification endpoint.
The token endpoint now supports both:
- POST: Issue new tokens (authorization code exchange)
- GET: Verify existing tokens (resource server validation)

Changes:
- Added GET handler to /token endpoint
- Extracts Bearer token from Authorization header (RFC 6750)
- Returns JSON with me, client_id, scope
- Returns 401 with WWW-Authenticate for invalid tokens
- 11 new tests covering all verification scenarios

All 533 tests passing. Resolves critical P0 blocker for v1.0.0.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-11-25 08:10:47 -07:00

..

authentication-flow-fix.md

fix(auth): require email authentication every login

2025-11-22 15:16:26 -07:00

authorization-verification-fix.md

fix(auth): require email authentication every login

2025-11-22 15:16:26 -07:00

client-id-validation-compliance.md

fix(validation): implement W3C IndieAuth compliant client_id validation

2025-11-24 18:14:55 -07:00

dns-verification-bug-fix.md

fix(dns): query _gondulf subdomain for domain verification

2025-11-22 17:46:38 -07:00

phase-2-domain-verification.md

docs: add Phase 2 domain verification design and clarifications

2025-11-20 13:05:09 -07:00

phase-2-implementation-guide.md

docs: add Phase 2 domain verification design and clarifications

2025-11-20 13:05:09 -07:00

phase-3-token-endpoint.md

feat(phase-3): implement token endpoint and OAuth 2.0 flow

2025-11-20 14:24:06 -07:00

phase-4-5-critical-components.md

feat(phase-4a): complete Phase 3 implementation and gap analysis

2025-11-20 17:16:11 -07:00

phase-4a-clarifications.md

feat(phase-4a): complete Phase 3 implementation and gap analysis

2025-11-20 17:16:11 -07:00

phase-4b-clarifications.md

feat(security): merge Phase 4b security hardening

2025-11-20 18:28:50 -07:00

phase-4b-security-hardening.md

feat(security): merge Phase 4b security hardening

2025-11-20 18:28:50 -07:00

phase-5a-clarifications.md

feat(deploy): merge Phase 5a deployment configuration

2025-11-21 19:16:54 -07:00

phase-5a-deployment-config.md

feat(deploy): merge Phase 5a deployment configuration

2025-11-21 19:16:54 -07:00

phase-5b-clarifications.md

feat(test): add Phase 5b integration and E2E tests

2025-11-21 22:22:04 -07:00

phase-5b-integration-e2e-tests.md

feat(test): add Phase 5b integration and E2E tests

2025-11-21 22:22:04 -07:00

phase-5c-real-client-testing.md

fix(validation): implement W3C IndieAuth compliant client_id validation

2025-11-24 18:14:55 -07:00

response-type-fix.md

fix(auth): require email authentication every login

2025-11-22 15:16:26 -07:00

token-verification-endpoint.md

feat(token): implement GET /token for token verification

2025-11-25 08:10:47 -07:00