tking/bascule-oss
SHA256
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Open-source SSH proxy with identity-aware shell (Rust)
2 commits 1 branch 0 tags 410 KiB
Rust 94.8%
CSS 2.4%
Dockerfile 1.3%
Smarty 0.9%
Makefile 0.6%
Find a file
Tyler King 02142f7be4 feat: Entra Agent ID auth provider + governance leak cleanup 
New crate: bascule-auth-agent-id
  Microsoft Entra Agent ID authentication for AI agents
  Validates OAuth tokens against Entra JWKS (60min cache)
  Extracts agent metadata: type, blueprint, sponsor, scopes
  Detects on-behalf-of (delegated) agents
  Token-as-password pattern for SSH auth

Cleanup:
  Removed all governance-specific references from comments
  SessionHandler trait is the only extension point
  Zero substrate/chronicle/gsap dependencies
  Config example uses neutral terminology

Config:
  [auth.agent_id] section for Entra configuration
  tenant_id, audiences, multi_tenant fields

3 crates: bascule-core, bascule-server, bascule-auth-agent-id
938 lines total, 5.6MB binary, 0 substrate deps.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-04 22:35:32 -04:00
config feat: Entra Agent ID auth provider + governance leak cleanup 2026-04-04 22:35:32 -04:00
crates feat: Entra Agent ID auth provider + governance leak cleanup 2026-04-04 22:35:32 -04:00
.gitignore feat: Bascule — identity-aware SSH proxy 2026-04-04 22:25:33 -04:00
Cargo.lock feat: Entra Agent ID auth provider + governance leak cleanup 2026-04-04 22:35:32 -04:00
Cargo.toml feat: Entra Agent ID auth provider + governance leak cleanup 2026-04-04 22:35:32 -04:00