 ztaylor
|
8b48f5813e
|
finding (cat-2): Entra User Source keys user_id on opaque sub, mismatches dashboard email -> blocks downstream OAuth consent bind; redirect-uri/secret issue resolved
|
2026-06-22 09:51:13 -04:00 |
|
|
ztaylor
|
1f74800049
|
finding (cat-2): per-user Google OAuth consent works but token does not vault for headless Arcade-User-ID
|
2026-06-18 14:12:05 -04:00 |
|
|
ztaylor
|
dabbf6daa1
|
cat1: mixed-server (2.7) + whoami per-user execution proof (2.4) PASS via tunnel-registered ref server
|
2026-06-18 12:09:52 -04:00 |
|
|
ztaylor
|
beb17c0a8f
|
fixture: reference MCP server (echo/add/whoami); finding: arcade deploy is cloud-only
|
2026-06-18 11:14:50 -04:00 |
|
|
ztaylor
|
2d02ddbd35
|
cat1: live probes — protocol/curation PASS, per-user list gateway-wide (finding), ungranted rejected
|
2026-06-18 11:01:07 -04:00 |
|
|
ztaylor
|
dfc7f6a589
|
docs: record confirmed headless auth headers (Authorization + Arcade-User-ID)
|
2026-06-18 10:13:15 -04:00 |
|
|
ztaylor
|
34a10be5ef
|
docs: ground rules + frozen live-POC facts (incl. metrics pipeline)
|
2026-06-18 10:07:02 -04:00 |
|