Authenticate GitHub marketplace API requests via RFC 8693 token exchange - #325815

Draft

Michael Cummings (MSFT) (mcumming) wants to merge 32 commits into

microsoft:mainfrom

mcumming:github-marketplace-api-auth

Commits on Jul 10, 2026

Add extensions.gallery.authProvider policy, marketplace scope, and context key

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
ba9e162
Add Entra ID eligibility check to the gallery manifest service

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
3435ee8
Add provider-aware marketplace sign-in and access-denied UX

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
7fb68cf
Add microsoft to trustedExtensionAuthAccess

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
bebf7f5
Add unit tests for marketplace provider routing and eligibility

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
0bfd24a
Harden Entra marketplace access: cache scoping, race guards, error handling

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
b58ca78
Address Copilot PR review: policy export, cross-account leak, layering, resource validation, UX copy

Michael Cummings (MSFT) (mcumming)
and
Copilot
committed
282c38d

Commits on Jul 14, 2026

Commits on Jul 15, 2026

Commits on Jul 16, 2026