• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

hluk / waiverdb / 23800653172
84%
master: %

Build:
Build:
LAST BUILD BRANCH: fix-oidc-groups
DEFAULT BRANCH: master
Ran 31 Mar 2026 01:47PM UTC
Jobs 1
Files 48
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

31 Mar 2026 01:45PM UTC coverage: 83.428% (+0.04%) from 83.387%
23800653172

push

github

hluk
Fall back to decoded access token for OIDC group extraction

When authenticating via the OIDC browser login, the ID token may not
include group claims (realm_access.roles) depending on the Keycloak
mapper configuration. Decode the access token JWT as a fallback source
for OIDC claims using authlib utilities.

- Add decoded access token as a fallback in _oidc_session_sources()
- Use authlib extract_segment/json_loads instead of custom JWT parsing
- Request 'roles' OIDC scope for Keycloak compatibility
- Set id.token.claim=false in docker Keycloak to match production
- Add admin user to waiverdb-users role for functional tests
- Add Selenium functional test for browser-based OIDC group auth

Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>
JIRA: RHELWF-13972

263 of 368 branches covered (71.47%)

Branch coverage included in aggregate %.

47 of 67 new or added lines in 4 files covered. (70.15%)

13 existing lines in 1 file now uncovered.

2083 of 2444 relevant lines covered (85.23%)

0.85 hits per line

Uncovered Changes

Lines Coverage ∆ File
11
78.61
0.65% waiverdb/auth.py
9
0.0
0.0% functional-tests/test_oidc_groups.py

Coverage Regressions

Lines Coverage ∆ File
13
78.61
0.65% waiverdb/auth.py
Jobs
ID Job ID Ran Files Coverage
1 python- - 23800653172.1 31 Mar 2026 01:47PM UTC 48
83.43
GitHub Action Run
Source Files on build 23800653172
  • Tree
  • List 48
  • Changed 1
  • Source Changed 0
  • Coverage Changed 1
Coverage ∆ File Lines Relevant Covered Missed Hits/Line Branch Hits Branch Misses
  • Back to Repo
  • f9d058ad on github
  • Prev Build on fix-oidc-groups (#23799209579)
  • Next Build on fix-oidc-groups (#23845723617)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc