• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

bleedingdeacons / guardian
94%

Build:
DEFAULT BRANCH: main
Repo Added 08 Oct 2026 08:52PM UTC
Token mwHORXlOg1Kgqiyhqs08EljuRmC0McdW7 regen
Build 7 Last
Files 16
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x
Reset
Sync Branches
  • main
  • chore/export-ignore
  • feat/firebase-id-token
  • test/malformed-key-sets

20 Oct 2026 11:05PM UTC coverage: 94.366% (+0.02%) from 94.349%
39512652448

push

github

web-flow
feat: verify Firebase ID tokens from native Google sign-in (#3)

* feat: verify Firebase ID tokens from native Google sign-in

Monitor and Link now sign in to Google natively on Android and iOS (the
platform's account picker, then Firebase Auth) and post the Firebase ID
token. FirebaseIdTokenVerifier checks it on the consumer's behalf.

A native sign-in carries no nonce of ours, so it is pinned instead: issuer
and audience to the consumer's Firebase project, firebase.sign_in_provider
to google.com, auth_time to the last five minutes, and each token is
accepted once. Purely additive, so an older Guardian loaded first by
another consumer does not break it.

* style: keep the auth_time check on one line for PHPCS

603 of 639 relevant lines covered (94.37%)

8.57 hits per line

Relevant lines Covered
Build:
Build:
639 RELEVANT LINES 603 COVERED LINES
8.57 HITS PER LINE
Source Files on main
  • Tree
  • List 16
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
39512652448 main feat: verify Firebase ID tokens from native Google sign-in (#3) * feat: verify Firebase ID tokens from native Google sign-in Monitor and Link now sign in to Google natively on Android and iOS (the platform's account picker, then Firebase Auth) a... push 20 Oct 2026 11:06PM UTC web-flow github
94.37
37849231880 main test: cover an empty key id, a malformed key set and an RSA key with no modulus (#2) Ported from Fellowship's TokenRefusalTest, which goes when Fellowship moves onto Guardian. Two of the three cover the only verifier lines the suite did not reach. push 08 Oct 2026 09:50PM UTC web-flow github
94.35
37845123610 main fix: keep tests and tooling config out of the Composer archive (#1) push 08 Oct 2026 09:15PM UTC web-flow github
94.01
37842332403 main feat: shared OAuth sign-in library for Fellowship and Reach The four providers (Google, Microsoft, Facebook, Apple), the RS256 ID-token verifier with the JWKS refresh floor, single-use sign-in state, the provider registry, the CredentialStore con... push 08 Oct 2026 08:52PM UTC crazeydave github
94.01
See All Builds (7)

Badge your Repo: guardian

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc