The render emits chapter 17's Clients #449

Parent

#444

What to build

The render emits chapter 17's Clients: an Application's client block becomes a Client object, derives the client path secret/data/<namespace>/<application>/client with the Identity Provider's write grant and the Application's read grant, and resolves ${client:issuer}, ${client:id} and ${client:secret}.

Acceptance criteria

• Every rule and refusal of chapter 17 is implemented in both implementations, with oracles.
• A worked example renders a native Client with a secret, and one with PKCE.
• npm run verify and the emf build pass.

Blocked by

• None (can start immediately)