m-lab / locate

92%

main: 92%

LAST BUILD ON BRANCH v0.18.0

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• main
• sandbox-cristinaleon-fix-hostname
• sandbox-cristinaleon-fix-label
• sandbox-cristinaleon-fix-prom-hostname
• sandbox-kinkade
• sandbox-kinkade-siteinfo
• sandbox-roberto-cloudbuild
• sandbox-roberto-cmsketch
• sandbox-roberto-connlimit
• sandbox-roberto-eeflag
• sandbox-roberto-fix-rl
• sandbox-roberto-heartbeat-jwt
• sandbox-roberto-jwt
• sandbox-roberto-metrics
• sandbox-roberto-no-promote
• sandbox-roberto-pass-qs-params
• sandbox-roberto-ratelimit
• sandbox-roberto-ratelimit-block
• sandbox-roberto-statistical-pt
• sandbox-roberto-update-cloudbuild
• sandbox-roberto-update-rl
• sandbox-soltesz-docs-parameters
• sandbox-soltesz-ns-replace
• sandbox-soltesz-testdeploy
• v0.15.6
• v0.15.7
• v0.15.8
• v0.16.0
• v0.17.0
• v0.17.1
• v0.17.2
• v0.17.3
• v0.17.4
• v0.17.5
• v0.17.6
• v0.17.7
• v0.17.8
• v0.18.0

Build # 1616

Build Type

push

travis-pro

Committed by web-flow

Commit Message

feat(auth): Add JWT authentication for heartbeat endpoints (#228)

* Add JWT-protected heartbeat endpoint with organization validation

* Fix JWT audience to match token-exchange service

* Fix JWT claims extraction for ESP v1 (GAE Flex)

* Use portable JWT parsing with go-jose library

* Update heartbeat client to use JWT authentication

* feat(auth): add JWT token refresh for heartbeat connections

Implements automatic JWT token renewal before expiry to handle GAE's
1-hour connection limits. Includes comprehensive test coverage.

* update comment

* feat(auth): update handler to read ESPv1's custom header

* add debug logging

* fix(auth): parse claims as a JSON string

* use base64.StdEncoding

* restore expiry parsing from JWT

* Make tests table-driven

Run Details

98 of 195 new or added lines in 3 files covered. (50.26%)

2112 of 2287 relevant lines covered (92.35%)

1.03 hits per line