go-pkgz / auth
85%
master: 85%

LAST BUILD BRANCH: fix/auth-sensitive-logging
DEFAULT BRANCH: master
Repo Added
Files 25
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH fix-oauth-from-open-redirect
branch: fix-oauth-from-open-redirect
CHANGE BRANCH
x

coverage: 84.66% (+0.4%) from 84.247%
24744848855

Pull #275

github

umputun 
chore(lint): use US 'honored' to satisfy misspell
Pull Request #275: fix: validate "from" redirect target in OAuth/verify flows

116 of 119 new or added lines in 7 files covered. (97.48%)

2798 of 3305 relevant lines covered (84.66%)

7.73 hits per line

Relevant lines Covered
3305 RELEVANT LINES 2798 COVERED LINES
7.73 HITS PER LINE
Source Files on fix-oauth-from-open-redirect

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
24744848855 fix-oauth-from-open-redirect chore(lint): use US 'honored' to satisfy misspell Pull #275 umputun github
84.66
24744850803 fix-oauth-from-open-redirect chore(lint): use US 'honored' to satisfy misspell Pull #275 umputun github
84.66
24744850787 fix-oauth-from-open-redirect chore(lint): use US 'honored' to satisfy misspell Pull #275 umputun github
84.25
24742559485 fix-oauth-from-open-redirect docs: align field godoc and README with opt-in redirect policy Addresses the six doc/comment drift items Copilot flagged and umputun confirmed in his 2026-04-21 review: when 975bb1f flipped the default to "nil = no validation (permissive legacy)"... Pull #275 paskal github
84.25
24739214145 fix-oauth-from-open-redirect fix(provider): address review on host-allowlist hardening Address Copilot and maintainer review comments on PR #275: * Hostname compare is case-insensitive (strings.EqualFold), mirroring checkAuds in token/jwt.go. DNS hostnames are case-insens... Pull #275 paskal github
84.66
24739214132 fix-oauth-from-open-redirect fix(provider): address review on host-allowlist hardening Address Copilot and maintainer review comments on PR #275: * Hostname compare is case-insensitive (strings.EqualFold), mirroring checkAuds in token/jwt.go. DNS hostnames are case-insens... Pull #275 paskal github
84.25
24596949195 fix-oauth-from-open-redirect chore(lint): use US 'behavior' to satisfy misspell Pull #275 paskal github
84.62
24596949765 fix-oauth-from-open-redirect chore(lint): use US 'behavior' to satisfy misspell Pull #275 paskal github
84.25
24596852431 fix-oauth-from-open-redirect fix(provider): make redirect host check opt-in (nil = permissive) Per maintainer review on PR #275: a dependency bump must not silently change behaviour for existing consumers. Flip the default so that a nil Opts.AllowedRedirectHosts means "no ho... Pull #275 paskal github
84.25
24596751515 fix-oauth-from-open-redirect fix(provider): port-insensitive host check + log only host on rejection Address Copilot review on PR #275: * isAllowedRedirect compared u.Host (which includes port). A from URL like https://app.example.com:443/x against an Opts.URL of https:... Pull #275 paskal github
84.62
See All Builds (1088)