21705484768
61%

Ran 05 Feb 2026 09:16AM UTC

Jobs 1

Files 492

Run time 1min

Badge

Embed ▾

Committed 05 Feb 2026 09:09AM UTC coverage: 60.854% (+0.02%) from 60.83%

Build # 21705484768

Build Type

push

github

Committed by

web-flow

Commit Message

Add token endpoint error handling integration tests (#3611)

Extend the OAuth authorization server integration test suite to cover
token endpoint error handling, replay attack prevention, and refresh
token grants. The error handling tests use a table-driven approach to
verify that invalid PKCE verifiers, unknown auth codes, missing or
mismatched redirect URIs, wrong client IDs, missing PKCE verifiers, and
grant type confusion all produce the correct RFC 6749/7636 error codes
and HTTP status codes.

A dedicated replay attack test confirms that authorization codes are
single-use by exchanging a code successfully, then verifying a second
exchange attempt is rejected. The refresh token test exercises the full
refresh grant flow including token rotation, verifying that old refresh
tokens are invalidated after use and that refreshed access tokens carry
proper expiration metadata.

Run Details

40865 of 67153 relevant lines covered (60.85%)

78.53 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
2	80.37	0.8%	pkg/transport/proxy/httpsse/http_proxy.go
2	57.89	-3.51%	pkg/transport/session/sse_session.go
71	9.29	-0.45%	cmd/thv/app/proxy.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	21705484768.1	05 Feb 2026 09:16AM UTC	492	60.85	GitHub Action Run

stacklok / toolhive / 21705484768
61%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 21705484768

stacklok / toolhive / 21705484768 61%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 21705484768

stacklok / toolhive / 21705484768
61%

README BADGES
x