Add SNI certificate support over mTLS (Bearer-over-mTLS) - #947

Draft

Robbie-Microsoft wants to merge 6 commits into

rginsburg/sni-mtls-popfrom

rginsburg/bearer-over-mtls

Commits on Jul 31, 2026

Add Bearer-over-mTLS: app-level flag + client-credentials path

Robbie-Microsoft
and
Copilot
committed
Route OBO/refresh/auth-code through Bearer-over-mTLS when flag is set

Robbie-Microsoft
and
Copilot
committed
Add Bearer-over-mTLS second-call cache-hit regression

Robbie-Microsoft
and
Copilot
committed
Add Bearer-over-mTLS end-to-end cells

Robbie-Microsoft
and
Copilot
committed
Document the send_certificate_over_mtls client_credential flag

Robbie-Microsoft
and
Copilot
committed
Harden Bearer-over-mTLS 2nd-call cache test with an env-lock assertion

Robbie-Microsoft
and
Copilot
committed