ilpanich / axiam / 39114860319

93%

push

github

test(bench): the device_authorization scenario authenticates its confidential client

#635 (3fcac1532) made /oauth2/device_authorization authenticate a
confidential client, as RFC 8628 §3.1 requires (its "no client
authentication" holds for public clients only). The seeded bench client is
confidential; that commit taught device_flow_poll.js to send the secret but
not device_authorization.js, so the 1.1.0 dry run failed the cell with every
request a 401 invalid_client (6491 of 6491). The header comment claiming the
endpoint needs no secret is corrected too.

Re-run in isolation against the HEAD image: PASS, ok=1206, p95=14ms.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PK57vDVZTvZex5whaVsprk

5281 of 5830 branches covered (90.58%)

Branch coverage included in aggregate %.

144161 of 154702 relevant lines covered (93.19%)

907.91 hits per line