- Shipped
- November 15, 2026 at 10:21 AM UTC
- Author
- Kamo
- Commit
- b980c0d
org_oidc_settings (issuer pinned at first enable, previous issuers still served, pairwise salt) and org_oidc_signing_keys (NEXT/CURRENT/RETIRED, private key encrypted with PlatformSecretCipher) + repos; KamoOAuthClient gains org_id (NULL = platform client), app type, logo, description, template, consent mode, access policy, pairwise subject, post-logout and back-channel logout URIs, id_token lifetime. Enum appends: purpose CONNECTED_APP, principal types MEMBER/CUSTOMER, auth method NONE, client status REMOVED, revoke reasons **************** new KamoOAuthAppType, KamoOAuthConsentMode, OidcKeyStatus. Hand DDL already applied (one ALTER on kamo_oauth_clients).