mozilla-releng / balrog / #4758

89%

main: 89%

Pull #3468

circleci

Don't use refresh tokens with auth0

Those get rejected because they require MFA again, which doesn't work
very well when you try to do that silently leading to weird errors where
the frontend thinks the user is authenticated but can't actually get a
proper access token. They were not used either before this but I thought
it was because of a misconfiguration of the previous library, not
because it wouldn't work. (it worked well when doing local dev since our
auth0 tenant for balrog localdev doesn't have mfa enabled... Lesson
learned here, do auth0 experiments on shipit instead)

3047 of 3563 branches covered (85.52%)

Branch coverage included in aggregate %.

5665 of 6183 relevant lines covered (91.62%)

0.92 hits per line