27723819102
71%

Ran 17 Jun 2026 10:34PM UTC

Jobs 1

Files 196

Run time 1min

Badge

Embed ▾

Committed 17 Jun 2026 10:28PM UTC coverage: 71.072% (-0.2%) from 71.274%

Build # 27723819102

Build Type

push

github

Committed by

web-flow

Commit Message

feat: add RS256 signing keys backed by AWS KMS (#2571)

Adds support for RSA signing keys backed by AWS KMS, which are the
cheapest type of key.

You specify `aws:kms:arn` as a claim in the private key's JWK and it all
flows from there. It uses the ambient credentials of the process to talk
to KMS.

---------

Co-authored-by: Chris Stockton <chris.stockton@supabase.io>

Coverage Stats

31 of 113 new or added lines in 6 files covered. (27.43%)

58 existing lines in 5 files now uncovered.

17832 of 25090 relevant lines covered (71.07%)

665.68 hits per line

Uncovered Changes

Lines	Coverage	∆	File
47	68.99	-31.01%	internal/conf/jwk.go
28	0.0		internal/conf/awskmsjwk/rs256.go
6	94.52	-0.89%	internal/conf/configuration.go
1	47.07	0.0%	internal/api/oauthserver/handlers.go

Coverage Regressions

Lines	Coverage	∆	File
32	3.56	-0.17%	internal/api/samlacs.go
12	91.78	-8.22%	internal/conf/saml.go
8	91.58	9.3%	internal/api/saml.go
4	94.52	-0.89%	internal/conf/configuration.go
2	68.99	-31.01%	internal/conf/jwk.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	27723819102.1	17 Jun 2026 10:34PM UTC	196	71.07	GitHub Action Run

supabase / auth / 27723819102
71%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Changes

Coverage Regressions

Jobs

Source Files on build 27723819102

supabase / auth / 27723819102 71%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Changes

Coverage Regressions

Jobs

Source Files on build 27723819102

supabase / auth / 27723819102
71%

README BADGES
x