stacklok / toolhive / 33072599165

70%

Build Type

push

github

Committed by web-flow

Commit Message

fix(authserver): map deliberate provisioning refusal to access_denied (#6441)

fix(authserver): map a deliberate provisioning refusal to access_denied

CreateUser can return storage.ErrUserNotProvisioned to signal a deployment
that provisions users out-of-band (e.g. SCIM) is deliberately refusing to
auto-create an unbound identity, rather than hitting an internal failure.
The callback handler now maps that specific error to fosite.ErrAccessDenied
instead of folding it into the generic server_error response every other
resolution failure still gets.

Coverage Stats

6 of 6 new or added lines in 1 file covered. (100.0%)

8 existing lines in 3 files now uncovered.

76045 of 109298 relevant lines covered (69.58%)

91.73 hits per line