supabase / supavisor / 40698333052

83%

Build Type

push

github

Committed by web-flow

Commit Message

feat: log the auth method on JWT rejection (#1252)

## Summary
- The `check_auth: rejected ...` warning now ends with the verifier that
rejected the token, e.g. `(hmac)` or `(jwks)`, so shared-secret and JWKS
(AWS STS) failures can be told apart in the logs.
- The `method` tag on the `[:supavisor, :jwt_auth, :rejected]` metric is
unchanged.

## Test plan
- `jwt_test.exs` asserts the suffix for an HMAC rejection and a JWKS
rejection.
- JWT and web test suites pass.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

8 existing lines in 4 files now uncovered.

3559 of 4283 relevant lines covered (83.1%)

43235.24 hits per line