Method SetOAuthProvider

internal/agent/api.go:437–437

SetOAuthProvider wires in the fosite-backed OAuth provider. When nil, /oauth2/* endpoints return 404 (matches the SetApprovalSigner / SetNotifier pattern of "optional capability, silently absent when not wired"). Operators who don't want OAuth enabled simply don't call this.

(p fosite.OAuth2Provider)

// silently absent when not wired"). Operators who don't want OAuth
// enabled simply don't call this.
func (a *API) SetOAuthProvider(p fosite.OAuth2Provider) { a.oauthProvider = p }

// SetSigner wires the RS256 agent-token signer (Slice 5b). Optional — when nil
// or disabled, /.well-known/jwks.json serves an empty key set and the