Issues

• Tracking: P0-9 — Three-library interop smoke facility (openid-client / authlib / go-oidc)

  voidvec/fulla#263 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-8 — ADR: RBAC permission enforcement design (role→scope set)

  voidvec/fulla#262 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-7 — WebAuthn credential deletion + post_logout_redirect_uris column

  voidvec/fulla#261 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-6 — Client display name on login/consent pages

  voidvec/fulla#260 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-5 — Discovery/doc reconciliation + S256-only PKCE

  voidvec/fulla#259 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-4 — Write audience on token issuance (introspection aud)

  voidvec/fulla#258 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-3 — Allow MFA backup codes at login

  voidvec/fulla#257 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-2 — Scope-gated userinfo claims + preferred_username

  voidvec/fulla#256 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: P0-1 — Unify token subject to public_sub (hard cut)

  voidvec/fulla#255 · Filter by author voidvec opened on Oct 10, 2026

• Tracking: follow-up features from the v1.4.0 pre-release review

  voidvec/fulla#249 · Filter by author voidvec opened on Sep 30, 2026

• Tracking: API contract/doc gaps from the v1.4.0 pre-release review

  voidvec/fulla#248 · Filter by author voidvec opened on Sep 30, 2026

• Tracking: domain-layer polish from the v1.4.0 pre-release review

  voidvec/fulla#247 · Filter by author voidvec opened on Sep 30, 2026