dunglas / mercure / 29907875749

88%

master: 93%

Build Type

push

github

Committed by web-flow

Commit Message

feat!: bind verification keys per issuer via WithIssuers (#1306)

* feat!: bind verification keys per issuer via WithIssuers

Replace the eight role-wide JWT options with a single WithIssuers option that
binds each trusted issuer to its own verification material, so a token is
verified only with the key(s) of the issuer it claims (RFC 9068 §4). The
unverified iss claim selects among preconfigured issuers only, never a key
source. This unblocks multi-issuer hubs, previously refused by
ErrTooManyTrustedIssuers.

The Caddyfile gains a repeatable `issuer` block with publisher/subscriber
subblocks (jwt / jwks_uri). The 0.x top-level directives remain as a
compatibility-mode single-issuer shorthand.

Closes #1302

* fix: port dev Caddyfile to issuer block, satisfy linters

- Migrate dev.Caddyfile to the issuer block (modern mode rejected the legacy
  top-level directives), fixing the conformance startup step.
- Drop the always-"*" parameter of the topicMatch test helper (unparam).
- Reformat configuration.md with Prettier.

Coverage Stats

86 of 100 new or added lines in 8 files covered. (86.0%)

1 existing line in 1 file now uncovered.

2774 of 3237 relevant lines covered (85.7%)

117.98 hits per line