erlef / oidcc / 130

91%

Build Type

push

github

Committed by web-flow

Commit Message

introspection improvements (#300)

* refactor: pull client authentication into a helper module

* feat: use `add_client_authentication` for introspection

If the OP supports other kinds of auth (but not the basic auth header),
this allows the introspection endpoint to work.

* feat: add `extra` parameter to token_introspection

From https://datatracker.ietf.org/doc/html/rfc7662#section-2.2:

> Specific implementations MAY extend this structure with their own
> service-specific response names as top-level members of this JSON
> object.

* fix: don't use any default algorithms for `client_secret_jwt`

Fixes #301

Run Details

62 of 62 new or added lines in 3 files covered. (100.0%)

1 existing line in 1 file now uncovered.

730 of 780 relevant lines covered (93.59%)

171.36 hits per line