Repository navigation

Add SNI certificate support over mTLS (Bearer-over-mTLS) - #947

Open

Robbie-Microsoft wants to merge 24 commits into

rginsburg/sni-mtls-popfrom

rginsburg/bearer-over-mtls

Open

Add SNI certificate support over mTLS (Bearer-over-mTLS)#947
Robbie-Microsoft wants to merge 24 commits into
rginsburg/sni-mtls-popfrom
rginsburg/bearer-over-mtls

Commits on Jul 31, 2026
- Add Bearer-over-mTLS: app-level flag + client-credentials path
  
  Robbie-Microsoft
  and
  Copilot
  committed
  f98961f
- Route OBO/refresh/auth-code through Bearer-over-mTLS when flag is set
  
  Robbie-Microsoft
  and
  Copilot
  committed
  93faa2f
- Add Bearer-over-mTLS second-call cache-hit regression
  
  Robbie-Microsoft
  and
  Copilot
  committed
  bf79927
- Add Bearer-over-mTLS end-to-end cells
  
  Robbie-Microsoft
  and
  Copilot
  committed
  ab024e7
- Document the send_certificate_over_mtls client_credential flag
  
  Robbie-Microsoft
  and
  Copilot
  committed
  92421b0
- Harden Bearer-over-mTLS 2nd-call cache test with an env-lock assertion
  
  Robbie-Microsoft
  and
  Copilot
  committed
  60a9f24
Commits on Oct 9, 2026
- Merge updated sni-mtls-pop foundation
  
  Robbie-Microsoft
  and
  Copilot
  committed
  3b45837
Commits on Oct 21, 2026
- Address mTLS review feedback
  
  Robbie-Microsoft
  and
  Copilot
  committed
  6e2c371
- Merge updated sni-mtls-pop foundation
  
  Robbie-Microsoft
  and
  Copilot
  committed
  3c66b97
Commits on Oct 22, 2026
- Fix Bearer-over-mTLS transport enforcement and PFX chains
  
  Robbie-Microsoft
  and
  Copilot
  committed
  a3ee807
- Merge mTLS binding context foundation
  Robbie-Microsoft
  committed
  c467604
Commits on Oct 23, 2026
- Merge mTLS PoP foundation and align Bearer semantics
  
  Robbie-Microsoft
  and
  Copilot
  committed
  5818a5c
- Merge PR #938 into Bearer-over-mTLS follow-up
  
  Robbie-Microsoft
  and
  Copilot
  committed
  8d4ecec
- Fix Bearer-over-mTLS routing, certificate overrides and PFX compatibility
  
  Robbie-Microsoft
  and
  Copilot
  committed
  30281ce
- Align Bearer-over-mTLS E2E failure and coverage semantics
  
  Robbie-Microsoft
  and
  Copilot
  committed
  820c96f
- Merge shared fail-closed certificate E2E fixtures
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b241b3d
- Merge shared E2E fixture portability fix
  
  Robbie-Microsoft
  and
  Copilot
  committed
  063325c
Commits on Oct 27, 2026
- Relocate default Bearer-over-mTLS E2E coverage
  
  Robbie-Microsoft
  and
  Copilot
  committed
  f481380
- Merge core mTLS parity fixtures and cache fix into Bearer coverage
  
  Robbie-Microsoft
  and
  Copilot
  committed
  5b0c827
- Merge compatible mTLS E2E transport cleanup
  
  Robbie-Microsoft
  and
  Copilot
  committed
  7692d10
- Treat an unspecified certificate consistently across mTLS requests
  
  Robbie-Microsoft
  and
  Copilot
  committed
  8e6acee
- Merge sanitized mTLS transport failure boundaries
  
  Robbie-Microsoft
  and
  Copilot
  committed
  37d8099
- Reject real Bearer certificate overrides before cache lookup
  
  Robbie-Microsoft
  and
  Copilot
  committed
  4ec4536
- Merge recorder validation privacy and duplicate-removal fixes
  
  Robbie-Microsoft
  and
  Copilot
  committed
  873937b

Commits

Commits on Jul 31, 2026

Commits on Oct 9, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 27, 2026