Skip to content

fix(agent): revalidate OpenAPI after public policy contradictions - #38

Merged
nkavian merged 1 commit into
aep-foundation:mainfrom
nkavian:fix/openapi-challenge-revalidation
Oct 17, 2026
Merged

nkavian merged 1 commit into
aep-foundation:mainfrom
nkavian:fix/openapi-challenge-revalidation

Conversation

@nkavian

@nkavian nkavian commented Oct 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Re-fetch OpenAPI when a validated AEP challenge contradicts a public operation policy. Keep metadata retrieval anonymous and continue the existing authentication flow if refresh fails. Cancellation still stops the request.

Distinguish public policies from unsupported mappings internally without adding a public API or a document cache.

Verification

  • make verify
  • make conformance interoperability
  • Regression tests cover changed and unchanged documents, refresh failure, cancellation, mismatched Service identity, unrelated challenges, authenticated denial, and credential isolation.

This does not add resource retries or automatic enrollment.

@nkavian
nkavian merged commit 6481c36 into aep-foundation:main Oct 17, 2026
4 checks passed
@nkavian
nkavian deleted the fix/openapi-challenge-revalidation branch October 17, 2026 02:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant