stacklok / toolhive / 33774717838

70%

Build Type

push

github

Committed by web-flow

Commit Message

Grant CIMD clients the server's allowed audiences (#6490)

CIMD-resolved clients were built with an empty audience list, so
fosite's DefaultAudienceMatchingStrategy rejected every refresh_token
grant with "has not been whitelisted by the OAuth 2.0 Client".
The authorization_code grant was unaffected because that path never
validates audience, so the failure only surfaced on refresh, roughly
an access-token lifetime after the first sign-in.
CIMDDecoratorConfig now carries AllowedAudiences, threaded from the
server's own AllowedAudiences at construction, and buildFositeClient
grants that list to every resolved client, mirroring how DCR clients
already inherit the server's AllowedAudiences (#3796).

Fixes: #6489

Coverage Stats

21 of 21 new or added lines in 2 files covered. (100.0%)

4 existing lines in 3 files now uncovered.

77680 of 111093 relevant lines covered (69.92%)

92.07 hits per line