go-pkgz / auth / 32195650516

86%

push

github

Honor documented session and audience parameters (#307)

Previously, the direct and verify providers read the session-only flag from
sess while README documented session, the verify provider read the site id
from site while README documented aud, and the Apple callback dropped the
SessionOnly flag carried by its own handshake claims and always issued a
persistent cookie.

Both spellings are now accepted on every provider, aud falls back to site,
and Apple propagates SessionOnly the way the oauth1 and oauth2 callbacks
already do.

18 of 18 new or added lines in 6 files covered. (100.0%)

3164 of 3676 relevant lines covered (86.07%)

9.27 hits per line