Adding Support For RAR and JAR Requests

[kishore7snehil]

Changes

• Added test cases to validate Pushed Authorization Requests (PAR) when used with:

  • RAR (Rich Authorization Requests): Allows passing authorization_details to enhance authorization parameters.
  • JAR (JWT Secured Authorization Requests): Uses signed JWTs for request integrity and security.

• Fixed publish.yml

References

• RAR Auth0 Docs – Rich Authorization Requests in Auth0.

• JAR RFC – JWT Secured Authorization Requests.

Testing

• This change adds test coverage.
  To verify the changes, follow these steps:

Testing RAR Support

1. Configure a Resource Server API to accept authorization_details.
   • Follow the RAR setup guide.
2. Make a request to the /oauth/par endpoint with the authorization_details parameter.
3. Ensure that the API correctly processes the request and enforces the authorization details as per RFC 9396.

Testing JAR Support

1. Generate a JAR request following the JAR setup guide.
2. Use the generated JWT as the request parameter in the authorization request.
3. Confirm that the request is correctly validated and processed.

• This change has been tested on the latest version of the platform/language.

Contributor Checklist

• I agree to adhere to the Auth0 General Contribution Guidelines.
• I agree to uphold the Auth0 Code of Conduct.