ADADR #144: approve Bixby OAuth provider design #145

Merged

lost-rob0t merged 3 commits from rage/144-bixby-oauth-provider-adadr into main

2026-08-24 12:22:48 +00:00

lost-rob0t commented

2026-08-24 12:19:50 +00:00

(Migrated from github.com)

Creates the canonical Auto-Research authority required before realizing starintel-server#111 / draft PR #117.

Nodes

STAR-RESEARCH-042 — current Samsung/Bixby OAuth evidence, current server OAuth-core state, trust boundaries, and adversarial threat model.
STAR-SERVER-042 — approved provider design for /oauth/authorize + /oauth/token, exact redirect binding, S256 PKCE, existing-human-user authentication, one-time code exchange, least-privilege scopes, no-store token responses, guest/user separation, and TDD verification map.
STAR-OAUTH-INDEX-042 — canonical order and downstream handoff to Bixby #11/#7/#8.

Operator research/design approval and threat-model requirement are durably recorded in issue #144. Implementation remains NOT STARTED in the Auto-Research implementation slot; server PR #117 remains tests-first RED until this design is merged/promoted.

Fresh Samsung documentation was rechecked on 2026-08-24. No Simulator, Developer Center registration, private submission, or Galaxy device validation is claimed.

Local canonical repo validation could not run in this execution environment because github.com DNS resolution failed. Merge only after the exact PR head passes the repository's canonical Pages/document validation gates.

Creates the canonical Auto-Research authority required before realizing `starintel-server#111` / draft PR #117. ## Nodes - `STAR-RESEARCH-042` — current Samsung/Bixby OAuth evidence, current server OAuth-core state, trust boundaries, and adversarial threat model. - `STAR-SERVER-042` — approved provider design for `/oauth/authorize` + `/oauth/token`, exact redirect binding, S256 PKCE, existing-human-user authentication, one-time code exchange, least-privilege scopes, no-store token responses, guest/user separation, and TDD verification map. - `STAR-OAUTH-INDEX-042` — canonical order and downstream handoff to Bixby #11/#7/#8. Operator research/design approval and threat-model requirement are durably recorded in issue #144. Implementation remains `NOT STARTED` in the Auto-Research implementation slot; server PR #117 remains tests-first RED until this design is merged/promoted. Fresh Samsung documentation was rechecked on 2026-08-24. No Simulator, Developer Center registration, private submission, or Galaxy device validation is claimed. Local canonical repo validation could not run in this execution environment because github.com DNS resolution failed. Merge only after the exact PR head passes the repository's canonical Pages/document validation gates.