stacklok / toolhive / 21969389506

62%

Build Type

push

github

Committed by web-flow

Commit Message

Set audience on DCR clients for refresh token support (#3796)

DCR-registered clients had no Audience field set on the fosite
DefaultClient. During refresh token requests with resource= (RFC 8707),
Fosite validates the original session's granted audience against the
client's registered audience whitelist. With an empty whitelist, all
refresh token requests failed with "has not been whitelisted".

Pass AllowedAudiences from the server config to registration.New() so
DCR clients inherit the server's allowed audiences.

Fixes: #3777

Run Details

2 of 2 new or added lines in 2 files covered. (100.0%)

33 existing lines in 3 files now uncovered.

44095 of 71176 relevant lines covered (61.95%)

76.27 hits per line