feat(federation): silent browser bootstrap via DeniedHttpResponse - #23

Open

nijave wants to merge 3 commits into

mainfrom

feat/authz-bootstrap-token-response-header

Commits on Aug 1, 2026

feat(federation): expose the minted bearer on the response path too
nijave
committed
3665a7e
feat(federation): browser-bootstrap document navigations, drop the Lua-header approach
nijave
committed
24d51e7
fix(federation): match bootstrap-exempt paths without the query string
nijave
committed
ef53097