hyperscale-stack / security / 38357052403

98%

master: 98%

Build Type

Pull #119

github

Committed by euskadi31

Commit Message

test(oidc): unit-test the provider guards the core now precedes

The provider re-checks the response type and the nonce of every OpenID
request. The core now refuses those requests first: it bounds the nonce
of every request, and the provider serves no implicit flow, while a
handler built from Server() is not mounted for OpenID requests. So no
request reaches the two refusals any more. They stay as the provider's
own defense in depth and are now tested directly, as the package already
does for its token-response client check.

Audit: STORE-01, OAUTH-I4.

Pull Request Pull Request #119: fix(oauth2)!: harden the authorization server endpoints

Coverage Stats

396 of 396 new or added lines in 20 files covered. (100.0%)

3 existing lines in 1 file now uncovered.

13311 of 13554 relevant lines covered (98.21%)

5085.41 hits per line