ilpanich / axiam-swift-sdk / 29647438805

95%

Build Type

push

github

Committed by web-flow

Commit Message

Resolve org_id from access-token claim for the refresh body (D-14) (#2)

doRefresh built org_id as `config.orgID ?? config.orgSlug ?? ""`, so a client
configured with an organization *slug* sent the slug (or an empty string) as
org_id and its refresh failed the server's RefreshRequest deserialization
(org_id is a required UUID). The login response body carries org_slug but never
org_id, so — mirroring the Rust/Go/Python/etc. reference SDKs — recover the
org_id UUID from the access-token JWT claim.

- After a successful login/verifyMfa, decode the org_id claim out of the
  axiam_access cookie (unverified base64url decode — used only to echo the
  value the server re-derives and re-validates on refresh) into resolvedOrgID.
- doRefresh prefers resolvedOrgID, falling back to a UUID-form config org_id;
  it no longer substitutes the org slug where a UUID is required (same fix
  applied to the tenant_id fallback).
- Add a test asserting a slug-only-configured client sends the decoded org_id
  UUID (not the slug) on refresh.


Claude-Session: https://claude.ai/code/session_0156crGuZKUBcWe2w5bzD9y1

Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

14 of 0 new or added lines in 0 files covered. (NaN%)

9 existing lines in 1 file now uncovered.

681 of 719 relevant lines covered (94.71%)

16.81 hits per line