38256453707
74%
master: 76%

Ran 12 Oct 2026 01:37PM UTC

Jobs 1

Files 125

Run time 1min

Badge

Embed ▾

Committed 12 Oct 2026 01:32PM UTC coverage: 74.268% (-0.4%) from 74.672%

Build # 38256453707

Build Type

Pull #1388

github

Committed by

vincentvanhees

Commit Message

fix(oidc): validate non-SMART scopes against client allowlist

validate_scopes() returned True early for any request containing a SMART
scope (including openid), bypassing client.check_requested_scopes() for
the entire request. This allowed arbitrary unknown scopes to pass through
unchecked whenever openid was also present.

Non-SMART scopes are now explicitly validated against the client's allowed
scopes even when the request is identified as a SMART flow.

Pull Request Pull Request #1388: feat(smart): add SMART App Launch 2.0.0 and US Core Backend Services support

Coverage Stats

8933 of 12028 relevant lines covered (74.27%)

0.74 hits per line

Coverage Regressions

Lines	Coverage	∆	File
59	64.39	0.46%	utils.py
45	39.13	-6.32%	oidc/endpoints.py
44	68.09	-11.74%	oidc/grants/oidc_code_grant.py
35	85.67	-0.5%	models.py
10	90.86	-4.35%	jwt/token.py
2	77.84	-0.19%	blueprints/oauth2.py

Jobs

ID	Job ID	Ran	Files	Coverage
1	38256453707.1	12 Oct 2026 01:37PM UTC	125	74.27	GitHub Action Run

uc-cdis / fence / 38256453707
74%
master: 76%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 38256453707

uc-cdis / fence / 38256453707 74% master: 76%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 38256453707

uc-cdis / fence / 38256453707
74%
master: 76%

README BADGES
x