hluk / waiverdb / 24714794508

84%

master: %

push

github

Drop authlib.jose and use uv sync in Dockerfile

Replace authlib.jose.jwt.decode + create_load_key() with simple base64
JWT payload extraction for reading OIDC access token claims. The token
was already verified during the OIDC login flow, so cryptographic
verification is unnecessary. This avoids the deprecated authlib.jose
module which breaks with newer authlib versions.

Use "uv sync --frozen --no-dev" instead of "uv pip install" in the
Dockerfile so the container installs exact versions from uv.lock.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

264 of 368 branches covered (71.74%)

Branch coverage included in aggregate %.

1 of 4 new or added lines in 1 file covered. (25.0%)

2099 of 2455 relevant lines covered (85.5%)

0.85 hits per line