go-pkgz / auth
86%
master: 85%

LAST BUILD BRANCH: refs/tags/v2.1.6
DEFAULT BRANCH: master
Repo Added
Files 25
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH refs/tags/v2.1.6
branch: SELECT
CHANGE BRANCH
x

coverage: 85.545% (+0.1%) from 85.445%
30137974767

push

github

web-flow 
feat: opt-in github numeric user id, reject non-2xx user info (#301)

* feat: add opt-in github user id derived from immutable numeric id

GitHub logins are released on rename or account removal and can be claimed
by someone else, so a local id derived from the login may be inherited by
the next holder of the name. Every other oauth2 provider here keys on an
immutable subject, github was the only one on a mutable field.

Add Params.GithubNumericID and Service.AddGithubProviderWithNumericID to
derive the id from the numeric account id instead. Off by default because
it changes the id of every existing github user, and records stored under
the old id cannot be remapped offline once a login is hashed.

The numeric id is read from the raw response body with a typed unmarshal.
data.Value is not usable for it, json numbers decode to float64 and format
as "1.345027e+06". A missing or zero id keeps the login-based value rather
than hashing an empty string.

Applied to both the v1 (provider/) and v2 (v2/provider/) module paths.

* fix(review-loop): iteration 1 addressed 8 findings

- [major] [provider/providers.go:70] numeric ids shared a hash namespace with logins, which may be all-digit; domain-separate the hashed input with a "gid:" prefix
- [major] [auth_test.go] AddGithubProviderWithNumericID had no test; add Service-level coverage plus the default-unchanged negative case
- [minor] [provider/providers.go:69] warn when the numeric id is unusable instead of falling back silently
- [minor] [provider/providers.go:52] default the logger in NewGithub, the mapUser closure captures p before initOauth2Handler defaults its own copy
- [minor] [provider/providers.go:65] comment claimed the login fallback was safe; state the recycling caveat instead
- [minor] [provider/oauth2.go:62] document the best-effort fallback on Params.GithubNumericID and the Service method
- [minor] [auth.go:389] add the advanced-configuration note the AddMicrosoftProvider godoc carries
- [min... (continued)

37 of 41 new or added lines in 4 files covered. (90.24%)

3107 of 3632 relevant lines covered (85.55%)

8.6 hits per line

Relevant lines Covered
3632 RELEVANT LINES 3107 COVERED LINES
8.6 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
30137974767 refs/tags/v2.1.6 feat: opt-in github numeric user id, reject non-2xx user info (#301) * feat: add opt-in github user id derived from immutable numeric id GitHub logins are released on rename or account removal and can be claimed by someone else, so a local id de... push web-flow github
85.55
30137971562 refs/tags/v1.25.6 feat: opt-in github numeric user id, reject non-2xx user info (#301) * feat: add opt-in github user id derived from immutable numeric id GitHub logins are released on rename or account removal and can be claimed by someone else, so a local id de... push web-flow github
85.49
30137974768 refs/tags/v2.1.6 feat: opt-in github numeric user id, reject non-2xx user info (#301) * feat: add opt-in github user id derived from immutable numeric id GitHub logins are released on rename or account removal and can be claimed by someone else, so a local id de... push web-flow github
85.49
30137971552 refs/tags/v1.25.6 feat: opt-in github numeric user id, reject non-2xx user info (#301) * feat: add opt-in github user id derived from immutable numeric id GitHub logins are released on rename or account removal and can be claimed by someone else, so a local id de... push web-flow github
85.55
30137880275 master feat: opt-in github numeric user id, reject non-2xx user info (#301) * feat: add opt-in github user id derived from immutable numeric id GitHub logins are released on rename or account removal and can be claimed by someone else, so a local id de... push web-flow github
85.49
30137880201 master feat: opt-in github numeric user id, reject non-2xx user info (#301) * feat: add opt-in github user id derived from immutable numeric id GitHub logins are released on rename or account removal and can be claimed by someone else, so a local id de... push web-flow github
85.55
30137641650 feat/github-numeric-id fix(test): drop shadowed variable in github provider subtest The "with extra scopes" subtest redeclared r inside the closure, shadowing the handler from the enclosing test. govet's shadow check is enabled and CI runs a pinned golangci-lint, so th... Pull #301 umputun github
85.49
30137641644 feat/github-numeric-id fix(test): drop shadowed variable in github provider subtest The "with extra scopes" subtest redeclared r inside the closure, shadowing the handler from the enclosing test. govet's shadow check is enabled and CI runs a pinned golangci-lint, so th... Pull #301 umputun github
85.55
29079091063 ci/go-1.26-golangci-2.12 ci: update checkout to v7 and codeql-action to v4, quote GITHUB_WORKSPACE Pull #300 paskal github
85.51
29079091071 ci/go-1.26-golangci-2.12 ci: update checkout to v7 and codeql-action to v4, quote GITHUB_WORKSPACE Pull #300 paskal github
85.45
See All Builds (1128)