fix: fully stateless OAuth tokens, drop HOMEASSISTANT_TOKEN requirement - #893

Merged

kingpanther13 merged 13 commits into

homeassistant-ai:masterfrom

kingpanther13:fix/oauth-stateless-tokens

Apr 7, 2026

Commits on Apr 6, 2026

fix: make OAuth tokens fully stateless, drop HOMEASSISTANT_TOKEN requirement

kingpanther13
and
claude
committed
e2da834
fix: validate json.loads returns dict in _decode_token

kingpanther13
and
claude
committed
976b03d
Merge branch 'master' into fix/oauth-stateless-tokens
kingpanther13
authored
08204f4

Commits on Apr 7, 2026

fix: address all 11 review comments from sergeykad

kingpanther13
and
claude
committed
16c2ac6
fix: sign ALL tokens with HMAC, not just refresh

kingpanther13
and
claude
committed
c88cfa8
fix: remove dead to_dict/validated_at from HomeAssistantCredentials (#9)

kingpanther13
and
claude
committed
ac215d6
Merge branch 'master' into fix/oauth-stateless-tokens
kingpanther13
authored
5eb29ae
Merge remote-tracking branch 'upstream/master' into fix/oauth-stateless-tokens
kingpanther13
committed
6a20566
Merge remote-tracking branch 'upstream/master' into fix/oauth-stateless-tokens
kingpanther13
committed
c470a53
Merge branch 'fix/oauth-stateless-tokens' of https://github.com/kingpanther13/ha-mcp-fork into fix/oauth-stateless-tokens
kingpanther13
committed
a593930
fix(ci): add Docker image caching to performance-tests.yml

kingpanther13
and
claude
committed
5e2566f
fix: remove unsigned token backwards-compat path (#12)

kingpanther13
and
claude
committed
5e8f4db
fix: update backwards-compat test to expect rejection

kingpanther13
and
claude
committed
975dac9