1
65%
master: 65%

Ran 16 Oct 2023 12:05PM UTC

Files 111

Run time 6s

Badge

Embed ▾

Committed 16 Oct 2023 11:57AM UTC coverage: 65.612% (-0.006%) from 65.618%

Job # 6533204770.1

Build Type

push

github

Committed by

web-flow

Commit Message

feat: add `GOTRUE_<PROVIDER>_SKIP_NONCE_CHECK` to skip nonce checks in ODIC flow (#1264)

It appears that in certain client libraries that deal with the OIDC
authentication flow, such as [this one for React Native on
iOS](https://github.com/google/GoogleSignIn-iOS/pull/244), the clients
are unable to extract the nonce that is generated randomly by the
library.

This option allows to temporarily drop the enforcement at the GoTrue
level when performing the OIDC flow. This does remove an important
security barrier, which could potentially allow "stolen" ID tokens to be
used on third-party services (that have opted in to this configuration)
however in the interest of flexibility and broad platform support the
option is being added.

Run Details

7426 of 11318 relevant lines covered (65.61%)

51.48 hits per line

supabase / gotrue / 6533204770 / 1
65%
master: 65%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 6533204770.1

supabase / gotrue / 6533204770 / 1 65% master: 65%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 6533204770.1

supabase / gotrue / 6533204770 / 1
65%
master: 65%

README BADGES
x