Skip to content

v0.3.0 Release Notes

Release Date: May 11, 2026

Highlights

This release adds two new production-ready adapters for integrating agent-protocols with OAuth infrastructure:

  • SharkAuth Adapter - Agent delegation with may_act_grants and DPoP proof-of-possession
  • Ory Adapter - Custom Fosite OAuth handlers and Hydra client integration

New Features

SharkAuth Adapter

The SharkAuth adapter (adapters/sharkauth/) provides integration with SharkAuth, an OAuth 2.0 server purpose-built for agent delegation.

Key Features:

  • RFC 8693 Token Exchange for agent tokens
  • DPoP proof-of-possession binding per RFC 9449
  • may_act_grants API for structured delegation
  • Cascade revocation support
  • Full AAuth protocol integration

Example:

import "github.com/aistandardsio/agent-protocols/adapters/sharkauth"

client, _ := sharkauth.NewClient("https://auth.example.com",
    sharkauth.WithClientCredentials("client-id", "client-secret"),
)

// Create delegation grant
grant, _ := client.CreateDelegationGrant(ctx, sharkauth.DelegationGrantRequest{
    ActorSubject: "agent:calendar-bot",
    UserSubject:  "user:alice",
    Scopes:       []string{"calendar:read"},
    TTL:          24 * time.Hour,
})

// Exchange token with DPoP
proof, _ := sharkauth.CreateDPoPProof(privateKey, "POST", client.TokenURL())
resp, _ := client.ExchangeAAuthToken(ctx, agentToken,
    sharkauth.WithDPoP(proof.Token),
)

Ory Adapter

The Ory adapter (adapters/ory/) provides integration with the Ory ecosystem.

Fosite Subpackage:

  • Custom OAuth grant handlers for ID-JAG assertions
  • Custom OAuth grant handlers for AAuth agent tokens
  • Token storage interface with in-memory implementation
  • Pluggable scope and audience validation strategies

Hydra Subpackage:

  • Client for Hydra public and admin APIs
  • RFC 8693 Token Exchange support
  • JWT Bearer grant support (RFC 7523)
  • Token introspection with actor claim support

Example:

import "github.com/aistandardsio/agent-protocols/adapters/ory/hydra"

client, _ := hydra.NewClient("https://hydra.example.com",
    hydra.WithAdminURL("https://hydra-admin.example.com"),
)

// Exchange ID-JAG assertion
resp, _ := client.ExchangeIDJAG(ctx, assertion,
    hydra.WithScope("read write"),
)

// Introspect token
introspect, _ := client.IntrospectToken(ctx, resp.AccessToken)

Documentation

Examples

New working examples demonstrating adapter usage:

# SharkAuth with AAuth
go run ./adapters/sharkauth/examples/aauth

# Ory Hydra with ID-JAG
go run ./adapters/ory/examples/idjag

Three-Tier Architecture Progress

With this release, the adapter tier is now complete:

Adapter Status Version
Zitadel Complete v0.2.0
SharkAuth Complete v0.3.0
Ory Complete v0.3.0

The next phase (v0.4.0) will focus on production demos with Docker Compose and full infrastructure examples.

Installation

go get github.com/aistandardsio/agent-protocols@v0.3.0

Changelog

See the full changelog for all changes.