• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

Altinity / altinity-mcp / 25440847973
82%
main: 79%

Build:
Build:
LAST BUILD BRANCH: feature-multicluster
DEFAULT BRANCH: main
Ran 06 May 2026 02:17PM UTC
Jobs 1
Files 17
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

06 May 2026 02:01PM UTC coverage: 81.997% (-0.9%) from 82.905%
25440847973

Pull #101

github

BorisTyshkevich
oauth: emit canonical resource URL with trailing slash; tolerate either form on inbound aud

handleOAuthProtectedResource now returns "resource" in its canonical
RFC 9728 form (always trailing slash), produced by canonicalResourceURL.
This matches what most upstream IdPs (Auth0, Google) emit in `aud`
claims and what RFC 9728 §3.3 picks as the canonical resource
identifier. Strict OAuth clients (Claude.ai) compare the resource
metadata field literally, so the slash-less form caused mismatches.

audienceMatchesResource is a small helper that compares an audience
list against an expected resource URL with trailing-slash tolerance,
so tokens minted before this change (no slash) still validate, and
tokens minted after (with slash) also validate when admin config
keeps the no-slash form. Both validateOAuthClaims and the external-JWT
path use the helper.

Also adds:
- TestCanonicalResourceURL covering empty / whitespace / multi-slash
  inputs and path-suffixed bases.
- audience_trailing_slash_tolerant subtest in TestValidateOAuthClaims
  exercising both directions.
- Existing protected-resource tests updated to assert the canonical
  trailing-slash form.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Pull Request #101: Wire OAuth config to CLI flags / env vars (closes #96)

166 of 183 new or added lines in 4 files covered. (90.71%)

6 existing lines in 1 file now uncovered.

4491 of 5477 relevant lines covered (82.0%)

1.22 hits per line

Uncovered Changes

Lines Coverage ∆ File
15
86.11
pkg/config/cli_reflect.go
1
87.93
-2.48% cmd/altinity-mcp/main.go
1
78.87
-0.25% cmd/altinity-mcp/oauth_server.go

Coverage Regressions

Lines Coverage ∆ File
6
89.8
-1.42% pkg/server/server_auth_oauth.go
Jobs
ID Job ID Ran Files Coverage
1 25440847973.1 06 May 2026 02:17PM UTC 17
82.0
GitHub Action Run
Source Files on build 25440847973
  • Tree
  • List 17
  • Changed 4
  • Source Changed 4
  • Coverage Changed 4
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #25440847973
  • Pull Request #101
  • PR Base - main (#25428004253)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc