Retarget OIDC / OAuth after DID and local-first - #1310

Open

joepio wants to merge 12 commits into

cursor/oidc-oauth-reconsider-1cb5

Commits on Aug 27, 2026

docs: retarget OIDC/OAuth after DID and local-first

cursoragent
and
joepio
committed
95bedc6
docs: put optional OAuth on the FOSS node, not only SaaS

cursoragent
and
joepio
committed
3eba071
docs: keep the OIDC plan on the open node

cursoragent
and
joepio
committed
5c8e300
docs: spell out the atomic-server OIDC walkthrough

cursoragent
and
joepio
committed
55ea16b
docs: make OIDC the only credential, honestly custodial

cursoragent
and
joepio
committed
cc60946
docs: OIDC-only login is conventional; releasing the root key is not

cursoragent
and
joepio
committed
ceca532
docs: session tokens that sign are a second write protocol

cursoragent
and
joepio
committed
18aee6c
docs: choose root Agent as CA, session Agents as the certs

cursoragent
and
joepio
committed
71af0c1
docs: OIDC login is stock; Atomic AUTH is a token exchange

cursoragent
and
joepio
committed
9fbddb7
docs: OIDC-only must be reversible — export root, then unlink

cursoragent
and
joepio
committed
11f5d1c
docs: OIDC impact, code touchpoints, and operator IdP setup

cursoragent
and
joepio
committed
e5ee1fa

Commits on Aug 31, 2026

docs: how SessionCert signature and rights checks work

cursoragent
and
joepio
committed
517a371