stacklok / toolhive / 23654326109

65%

Build Type

push

github

Committed by web-flow

Commit Message

Support RFC 8414 path-based issuer discovery URLs (#4406)

PR #4348 (f64d8074) replaced the /.well-known/ catch-all mux pattern
with explicit exact registrations to prevent the auth server from
intercepting /.well-known/oauth-protected-resource. This broke RFC 8414
Section 3.1 discovery for path-based issuers: clients construct
/.well-known/oauth-authorization-server/{issuer-path} but the exact
pattern only matched /.well-known/oauth-authorization-server.

Register trailing-slash prefix variants on both the http.ServeMux
(Routes()) and chi router (WellKnownRoutes) so subpaths are routed
to the discovery handlers.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Run Details

8 of 8 new or added lines in 2 files covered. (100.0%)

9 existing lines in 3 files now uncovered.

52434 of 80196 relevant lines covered (65.38%)

64.86 hits per line