supabase / auth-js / 16192477863

81%

push

github

feat: fallback to `getUser()` if the `kid` of the JWT is not found (#1080)

Because the `/.well-known/jwks.json` is heavily cached, a developer may
rotate the standby key to in use faster than those caches expire. In
that case the `getClaims()` method may receive a JWT signed with a key
ID it doesn't recognize. Instead of failing with an error, it should
reach out directly to the Auth server to verify the JWT.

860 of 1304 branches covered (65.95%)

Branch coverage included in aggregate %.

3 of 5 new or added lines in 2 files covered. (60.0%)

1316 of 1606 relevant lines covered (81.94%)

166.24 hits per line