go-pkgz / auth / 20442464979

84%

push

github

fix: set cookies alongside header when SendJWTHeader is enabled (#262)

* fix: set cookies alongside header when SendJWTHeader is enabled

When SendJWTHeader is true, now sets both the JWT header AND cookies.
This fixes OAuth authentication flows where HTTP headers don't survive
browser redirects. Cookies are needed for the OAuth callback to complete
successfully, while headers are still set for direct API calls.

Fixes https://github.com/umputun/remark42/issues/1877

* test: add XSRF cookie value assertion in SendJWTHeader test

verify XSRF-TOKEN cookie value matches claims ID for consistency
with TestJWT_SetWithDomain

---------

Co-authored-by: Umputun <umputun@gmail.com>

2 of 2 new or added lines in 1 file covered. (100.0%)

2687 of 3215 relevant lines covered (83.58%)

7.18 hits per line