Credential system refactor: unified context, canonical matrix, eliminate dead code#5748

Closed

Copilot wants to merge 14 commits into

mainfrom

copilot/implement-phase-1-components

Commits on Feb 10, 2026

Initial plan
Copilot
committed
Implement Phase 1 core types and credential implementations

Copilot
and
gladjohn
committed
Add ResolvedCredentialMaterial property to AuthenticationRequestParameters

Copilot
and
gladjohn
committed
Add InvalidCredentialMaterial to PublicAPI files to fix RS0016 analyzer error

Copilot
and
gladjohn
committed
Remove legacy AddConfidentialClientParametersAsync method and use GetCredentialMaterialAsync via orchestrator

Copilot
and
gladjohn
committed
Add ExtraClientAssertionClaims and ClientAssertionFmiPath support to credential system

Copilot
and
gladjohn
committed
Add mTLS bearer mode support to skip JWT assertion when cert is pre-set

Copilot
and
gladjohn
committed
Fix DisposedCert test - wrap HasPrivateKey check to catch CryptographicException

Copilot
and
gladjohn
committed
Fix SNI assertion flow - use jwt-pop when TokenBindingCertificate present

Copilot
and
gladjohn
committed

Commits on Feb 11, 2026

Remove unused Stopwatch overhead from credential resolution

Copilot
and
gladjohn
committed