• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

hluk / waiverdb / 23845723617
84%
master: %

Build:
Build:
LAST BUILD BRANCH: fix-oidc-groups
DEFAULT BRANCH: master
Ran 01 Apr 2026 11:13AM UTC
Jobs 1
Files 48
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

01 Apr 2026 11:08AM UTC coverage: 83.649% (+0.2%) from 83.428%
23845723617

push

github

Lukas Holecek
Fall back to decoded access token for OIDC group extraction

When authenticating via the OIDC browser login, the ID token may not
include group claims (realm_access.roles) depending on the Keycloak
mapper configuration. Decode the access token JWT as a fallback source
for OIDC claims using authlib jwt.decode with JWKS verification.

- Add decoded access token as a fallback in _oidc_session_sources()
- Use authlib jwt.decode with JWKS verification for access token decoding
- Request 'roles' OIDC scope for Keycloak compatibility
- Set id.token.claim=false in docker Keycloak to match production
- Add admin user to waiverdb-users role for functional tests
- Add Selenium functional test for browser-based OIDC group auth

Assisted-by: Claude Opus 4.6 <noreply@anthropic.com>
JIRA: RHELWF-13972

263 of 366 branches covered (71.86%)

Branch coverage included in aggregate %.

43 of 57 new or added lines in 3 files covered. (75.44%)

12 existing lines in 1 file now uncovered.

2080 of 2435 relevant lines covered (85.42%)

0.85 hits per line

Uncovered Changes

Lines Coverage ∆ File
9
0.0
0.0% functional-tests/test_oidc_groups.py
5
81.82
3.21% waiverdb/auth.py

Coverage Regressions

Lines Coverage ∆ File
12
81.82
3.21% waiverdb/auth.py
Jobs
ID Job ID Ran Files Coverage
1 python- - 23845723617.1 01 Apr 2026 11:13AM UTC 48
83.65
GitHub Action Run
Source Files on build 23845723617
  • Tree
  • List 48
  • Changed 1
  • Source Changed 0
  • Coverage Changed 1
Coverage ∆ File Lines Relevant Covered Missed Hits/Line Branch Hits Branch Misses
  • Back to Repo
  • f61448c4 on github
  • Prev Build on fix-oidc-groups (#23800653172)
  • Next Build on fix-oidc-groups (#23852426946)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc