24606357007
84%
master: 93%

Ran 18 Apr 2026 02:07PM UTC

Jobs 1

Files 23

Run time 1min

Badge

Embed ▾

Committed 18 Apr 2026 02:04PM UTC coverage: 83.973%. First build

Build # 24606357007

Build Type

Pull #959

github

Committed by

dunglas

Commit Message

spec: clarify payload matching, URL Pattern base URL, and CEL DoS handling

Three clarifications surfaced while implementing this spec revision:

- Payload assignment: define what it means for a JWT claim matcher to
  "match" a subscription matcher. A claim matches when it is the
  wildcard `*`, when its (type, pattern) pair equals the subscription's,
  or when its matcher accepts the subscription's `match` string as a
  topic. Payload fallback to top-level `mercure.payload` is stated
  explicitly.

- URL Pattern base URL: recommend absolute patterns and describe the
  hub's freedom in resolving relative ones. Subscribers and publishers
  should not rely on the base URL being anything specific because
  resolution is implementation-defined.

- CEL evaluation cost limit: hubs SHOULD enforce an implementation-
  defined cost limit to mitigate DoS from pathological expressions in
  hostile JWTs; exceeding the limit yields `false`.

Also notes that hubs MAY reject oversized patterns with a 400 response.

Pull Request Pull Request #959: spec!: add support for several topic matcher types, including URL Pattern

Coverage Stats

1729 of 2059 relevant lines covered (83.97%)

48.86 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	0 - 24606357007.1	18 Apr 2026 02:07PM UTC	23	83.97	GitHub Action Run

dunglas / mercure / 24606357007
84%
master: 93%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 24606357007

dunglas / mercure / 24606357007 84% master: 93%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 24606357007

dunglas / mercure / 24606357007
84%
master: 93%

README BADGES
x