Skip to content

Release Notes v0.2.0

Release Date: June 27, 2026

Highlights

  • Orchestration Layer: Multi-protocol coordination moved from agent-protocols (HybridProvider, TokenVerifier, PolicyMatcher)
  • Client SDK: Agent authentication via ID-JAG token exchange (RFC 8693) and AAuth consent flow
  • Documentation: Comprehensive MkDocs documentation for orchestration and client components

Added

Orchestration Layer

The orchestration layer provides multi-protocol coordination for AI agent authentication:

  • TokenVerifier - Multi-protocol token verification with action-based routing
  • HybridProvider - Routes to ID-JAG or AAuth based on policy configuration
  • PolicyMatcher - Scope-based protocol selection with wildcard patterns
import "github.com/plexusone/agentauth"

// Configure token verification
verifier := agentauth.NewTokenVerifier(&agentauth.VerifierConfig{
    IDJAGEnabled: true,
    AAuthEnabled: true,
    SensitiveActions: []string{"write", "delete", "admin"},
})

// Verify with action checking
claims, err := verifier.VerifyForAction(ctx, token, "delete:resource")

Client SDK

Agent SDK for authenticating to resources:

import "github.com/plexusone/agentauth/client"

c := client.New("https://authz.example.com")

// ID-JAG token exchange (automated)
token, err := c.ExchangeIDJAG(ctx, assertion, "read:email")

// AAuth consent flow (human approval)
result, err := c.RequestAuthorization(ctx, &client.AuthorizationRequest{
    AgentToken:  agentToken,
    UserID:      "user-123",
    Scopes:      "write:profile",
    MissionName: "Update Profile",
})

Documentation

  • Orchestration layer docs: verifier, hybrid provider, policy matching
  • Client SDK docs: getting started, token exchange, consent flow
  • Updated README with orchestration layer usage

Changed

  • README updated with TokenVerifier, HybridProvider, and Client SDK documentation
  • MkDocs navigation includes new Orchestration and Client SDK sections

Dependencies

  • github.com/aistandardsio/agent-protocols v0.6.1 (orchestration layer moved out)

Migration from agent-protocols

If you were using github.com/aistandardsio/agent-protocols/agentauth:

// Before (agent-protocols v0.6.0)
import "github.com/aistandardsio/agent-protocols/agentauth"

// After (agentauth v0.2.0)
import "github.com/plexusone/agentauth"

The API remains the same - only the import path changed.