codozor / authk

50%

push

github

Feat/public client (#9)

* ✨ feat: add optional ID Token support

- Update configuration schema and Go structs to include idTokenKey
- Support saving ID tokens to .env files when configured
- Add --id-token flag to get command for direct output
- Add --id-token flag to inspect command for decoding
- Make ID token verification non-fatal to increase robustness
- Add unit tests for config loading and OIDC token handling
- Update README.md with new configuration options and flags

* ✨ feat: allow explicit token type in targets configuration

- Refactor `targets` schema to use `type` field instead of `idTokenKey`
- Update `inspect` command to intelligently resolve files and keys from the targets list
- Improve documentation for multiple target files and fix invalid examples in README
- Maintain backward compatibility for simple configuration via `tokenKey` and `idTokenKey`

* ✨ feat(oidc): support public clients without client secret

- Make clientSecret optional and add "none" authMethod
- Send client_id in request body without secret for public clients
- Reject client_credentials flow when no secret is configured
- Add config and OIDC tests for public client behaviour
- Document Keycloak public client setup in README

17 of 19 new or added lines in 1 file covered. (89.47%)

320 of 635 relevant lines covered (50.39%)

2.57 hits per line