twenty

Files

T

Félix Malfait fd3fe6aa2d feat(server): OAuth 2.0 server and application sync improvements

Add OAuth 2.0 authorization server capabilities and improve application
sync to automatically keep AppRegistration metadata up to date.

OAuth server:
- Authorization Code flow with PKCE support
- Client Credentials flow for machine-to-machine auth
- Refresh Token flow for token renewal
- All flows issue application-scoped tokens via ApplicationTokenService
- OpenID Connect discovery endpoint (/.well-known/openid-configuration)
- REST token endpoint with proper validation decorators
- JWT strategy updated for optional user context in app tokens

Application sync:
- Auto-create AppRegistration during manifest sync if missing
- Sync name, description, logoUrl, author, websiteUrl, termsUrl from manifest
- Sync server variable schemas from manifest declarations
- Flatten marketplaceData onto ApplicationManifest (remove nesting)

Made-with: Cursor

2026-02-26 10:57:25 +01:00

create-twenty-app

introduce metadata api client to twenty sdk (#18233 )

2026-02-25 21:42:05 +01:00

twenty-apps

Add Client Api generation (#17961 )

2026-02-17 18:45:52 +01:00

twenty-cli

…

twenty-docker

Fix website build (#18061 )

2026-02-18 23:34:36 +01:00