umputun / remark42 / 38118391548

84%

master: 84%

Build Type

Pull #2262

github

Committed by paskal

Commit Message

Compare token audiences with the configured sites exactly

The auth package matches audiences ignoring case, so with the bolt
store and --site=remark a token for REMARK was issued and accepted,
while store operations with it failed, as the store keys sites by their
exact name. With the bolt store, sessions whose audience is not exactly
a configured site are now rejected.

Pull Request Pull Request #2262: Close the admin takeover through the delete-me link

Coverage Stats

25 of 25 new or added lines in 3 files covered. (100.0%)

2 existing lines in 1 file now uncovered.

6057 of 7188 relevant lines covered (84.27%)

31.74 hits per line