1
53%
main: 53%

Ran 14 Aug 2023 10:36PM UTC

Files 280

Run time 3s

Badge

Embed ▾

Committed 14 Aug 2023 10:28PM UTC coverage: 63.973% (-0.02%) from 63.991%

Job # 5861315321.1

Build Type

push

github

Committed by

web-flow

Commit Message

authorize: rework token substitution in headers (#4456)

Currently Pomerium replaces dynamic set_request_headers tokens
sequentially. As a result, if a replacement value itself contained a
supported "$pomerium" token, Pomerium may treat that as another
replacement, resulting in incorrect output.

This is unlikely to be a problem given the current set of dynamic
tokens, but if we continue to add additional tokens, this will likely
become more of a concern.

To forestall any issues, let's perform all replacements in one pass,
using the os.Expand() method. This does require a slight change to the
syntax, as tokens containing a '.' will need to be wrapped in curly
braces, e.g. ${pomerium.id_token}.

A literal dollar sign can be included by using $$ in the input.

Coverage Stats

14202 of 22200 relevant lines covered (63.97%)

116.11 hits per line

pomerium / pomerium / 5861315321 / 1
53%
main: 53%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 5861315321.1

pomerium / pomerium / 5861315321 / 1 53% main: 53%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 5861315321.1

pomerium / pomerium / 5861315321 / 1
53%
main: 53%

README BADGES
x