go-pkgz / auth / 32187327168

86%

master: 86%

Pull #307

github

Honor documented session and audience parameters

Previously, the direct and verify providers read the session-only flag from
sess while README documented session, the verify provider read the site id
from site while README documented aud, and the Apple callback dropped the
SessionOnly flag carried by its own handshake claims and always issued a
persistent cookie.

Both spellings are now accepted on every provider, aud falls back to site,
and Apple propagates SessionOnly the way the oauth1 and oauth2 callbacks
already do.

18 of 18 new or added lines in 6 files covered. (100.0%)

3116 of 3641 relevant lines covered (85.58%)

8.92 hits per line