TREK/server at 66ac2a1b1b85910f6c9a91b143f5581c75d1cb2b - TREK

k1nq/TREK

mirror of https://github.com/mauriceboe/TREK.git synced 2026-06-20 13:51:45 +00:00

Files

T

jubnl c828fca059 feat(oauth): add client_credentials grant for machine clients and fix PlaceAvatar stale image retry

- Add OAuth 2.0 client_credentials flow so AI agents and scripts can obtain tokens directly via client_id + client_secret without any browser interaction
- New DB column allows_client_credentials on oauth_clients; machine clients skip redirect URI requirement and are forced confidential
- New issueClientCredentialsToken() issues access-only tokens (no refresh token, RFC 6749 §4.4)
- UI: "Machine client" checkbox in create-client modal, hides redirect URI field, shows indigo badge on existing machine clients
- Advertise client_credentials in OAuth discovery document
- 8 new integration tests (OAUTH-CC-001–008)
- i18n: 4 new keys across all 15 languages
- Fix PlaceAvatar: re-fetch photo via API on image_url load failure before falling back to initials
- Update MCP wiki docs with new Option B machine client setup guide

2026-05-22 14:42:20 +02:00

assets

refactor: move airports.json out of server/data into server/assets

2026-04-18 02:02:09 +02:00

public

v3.0.16 — bug fixes (#964 )

2026-05-06 21:38:40 +02:00

scripts

docs: add full wiki with 74 pages, assets, and CI workflow

2026-04-20 10:11:53 +02:00

src

feat(oauth): add client_credentials grant for machine clients and fix PlaceAvatar stale image retry