• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

m-lab / autojoin
70%

Build:
DEFAULT BRANCH: main
Repo Added 12 Feb 2024 04:25PM UTC
Files 19
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x
Reset
  • main
  • ci/release-binaries
  • dependabot/github_actions/actions-3a1c37d3b7
  • dependabot/go_modules/github.com/googleapis/gax-go-2.0.2incompatible
  • dependabot/go_modules/golang.org/x/crypto-0.45.0
  • dependabot/go_modules/gomod-minor-patch-4a58ba8e14
  • dependabot/go_modules/gomod-minor-patch-4b732bdfc4
  • dependabot/go_modules/gomod-minor-patch-7678b51ea3
  • dependabot/go_modules/gomod-minor-patch-84a25a23f2
  • dependabot/go_modules/gomod-minor-patch-8c811e0a14
  • dependabot/go_modules/gomod-minor-patch-9998116421
  • dependabot/go_modules/gomod-minor-patch-fb4d939785
  • dependabot/go_modules/gomod-minor-patch-fcfb1189d2
  • feat/credentials_project
  • feat/privsep
  • fix-register-healthcheck-exit
  • fix/autofix-workflow-permissions
  • fix/cloud_runtime
  • fix/dontpanic
  • fix/editorconfig
  • fix/goversionsync
  • fix/key_perms
  • sandbox-kinkade
  • sandbox-roberto-consolidate
  • sandbox-roberto-dependabot
  • sandbox-roberto-fix
  • sandbox-roberto-fix-apikey
  • sandbox-roberto-fix-delete-auth
  • sandbox-roberto-fix-probability
  • sandbox-roberto-gc-error-metrics
  • sandbox-roberto-jwt
  • sandbox-roberto-key-verifier
  • sandbox-roberto-mandatory-ipv4
  • sandbox-roberto-minver
  • sandbox-roberto-probability
  • sandbox-roberto-security-fixes
  • sandbox-roberto-update-app-yaml
  • sandbox-roberto-update-iata-csv
  • sandbox-roberto-update-orgadm

12 Oct 2026 05:10PM UTC coverage: 70.41%. Remained the same
38282466279

push

github

web-flow
fix(openapi.yaml): use CREDENTIALS_PROJECT (#113)

While staging and sandbox use the same project for deploying
the autojoin API and for credentials, production is configured
differently and uses two projects:

1. `mlab-oti` as the project with the token exchange endpoint

2. `mlab-autojoin` as the project with the autojoin API

The original motivation for this split is to manage the autojoined
machines as a separate cloud project, while using a single, central
endpoint for exchanging tokens.

Yet, the current `openapi.yaml` uses `{{PROJECT}}` as opposed to
`{{CREDENTIALS_PROJECT}}` in the `x-google-jwks_uri` definition and,
in turn, this leads to the following URL being used in prod:

```
https://auth.mlab-autojoin.measurementlab.net/.well-known/jwks.json
```

The `auth.mlab-autojoin.measurementlab.net` domain does not exist,
which prevents the ESP from validating JWTs.

Spotted while working on upgrading `byos-debian` to use `v0.5.0`
of the `m-lab/autojoin/cmd/register` client. The symptom is
that JWT validation fails with this error:

```
JWT validation failed: Unable to fetch verification key
```

1254 of 1781 relevant lines covered (70.41%)

0.78 hits per line

Relevant lines Covered
Build:
Build:
1781 RELEVANT LINES 1254 COVERED LINES
0.78 HITS PER LINE
Source Files on main
  • Tree
  • List 19
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
38282466279 main fix(openapi.yaml): use CREDENTIALS_PROJECT (#113) While staging and sandbox use the same project for deploying the autojoin API and for credentials, production is configured differently and uses two projects: 1. `mlab-oti` as the project with th... push 12 Oct 2026 05:11PM UTC web-flow github
70.41
38266125530 main fix(app.yaml): use ubuntu24 (#112) The go1.26 runtime is not supported by ubuntu22. See https://docs.cloud.google.com/appengine/docs/flexible/lifecycle/support-schedule push 12 Oct 2026 02:54PM UTC web-flow github
70.41
37832476042 main fix(Dockerfile {app,cloudbuild}.yaml): use go1.26 (#111) This diff fixes references to go1.25 that should have been updated when bumping the dependencies also bumped the minimum go version in the `go.mod`. Because it bothers me that one needs to ... push 08 Oct 2026 07:30PM UTC web-flow github
70.41
37804191450 main fix(register)!: handle json.Unmarshal error (#109) This patch updates `cmd/register/main.go` to handle `json.Unmarshal` errors, which are possible depending on what the response looks like. For example, a truncated response could cause `Unmarshal... push 08 Oct 2026 03:52PM UTC web-flow github
70.41
37797006279 main fix(register): exit when the /ready healthcheck server fails (#102) Co-authored-by: Simone Basso <bassosimone@gmail.com> push 08 Oct 2026 02:59PM UTC web-flow github
71.29
37793197917 main fix(coverage.yml): avoid mixed spaces and tabs (#110) While there, add a `.editorconfig`. I am so used to have one that is sane that I didn't pay attention and for some reason the build was green in the branch. push 08 Oct 2026 02:32PM UTC web-flow github
71.37
37787892233 main feat(register): add output dir for credentials (#108) This patch adds a new flag: `-output-secure`. Its default value is the value used by `-output`, for backward compatibility with deployments that only specify the `-output` flag. The purpose o... push 08 Oct 2026 01:53PM UTC web-flow github
71.37
37462621055 main ci: publish official release binaries (#104) push 06 Oct 2026 12:22PM UTC web-flow github
71.53
36022004223 main fix(cmd/register): service account key permissions (#103) The service account key is written with 0644 permissions. Because it is a secret, it should instead be written with 0600. I noticed this issue when analyzing `byos-debian` where the key i... push 24 Sep 2026 03:42PM UTC web-flow github
71.53
22229108368 main docs: add AGENTS.md with AI contribution guidelines push 20 Feb 2026 03:03PM UTC robertodauria github
72.15
See All Builds (294)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc