24742559485
85%
master: 85%

Ran 21 Apr 2026 07:39PM UTC

Jobs 1

Files 24

Run time 1min

Badge

Embed ▾

Committed 21 Apr 2026 07:38PM UTC coverage: 84.247%. Remained the same

Build # 24742559485

Build Type

Pull #275

github

Committed by

paskal

Commit Message

docs: align field godoc and README with opt-in redirect policy

Addresses the six doc/comment drift items Copilot flagged and umputun
confirmed in his 2026-04-21 review: when 975bb1f flipped the default to
"nil = no validation (permissive legacy)", the validator docstring in
redirect.go was updated but the downstream field godoc, README endpoint
bullets and one test docblock still read as if nil means "same-host-only".

* v2/auth.go:66 — Opts.AllowedRedirectHosts
* v2/provider/oauth2.go:45 — Params.AllowedRedirectHosts
* v2/provider/verify.go:35 — VerifyHandler.AllowedRedirectHosts
* README.md:185 — OAuth endpoint bullet
* README.md:294 — verify endpoint bullet
* v2/provider/oauth2_test.go:268 — TestOauth2LoginFromRejectsExternalHost
  docblock (test wires non-nil via enablePolicy; calling it "default
  (nil) allowlist" was misleading)

No code changes — redirect.go's policy as implemented stays authoritative.

Pull Request Pull Request #275: fix: validate "from" redirect target in OAuth/verify flows

Coverage Stats

2706 of 3212 relevant lines covered (84.25%)

7.27 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	24742559485.1	21 Apr 2026 07:39PM UTC	24	84.25	GitHub Action Run

go-pkgz / auth / 24742559485
85%
master: 85%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 24742559485

go-pkgz / auth / 24742559485 85% master: 85%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 24742559485

go-pkgz / auth / 24742559485
85%
master: 85%

README BADGES
x