supabase / auth-js / 16192477863 / 2

71%

master: 71%

push

github

feat: fallback to `getUser()` if the `kid` of the JWT is not found (#1080)

Because the `/.well-known/jwks.json` is heavily cached, a developer may
rotate the standby key to in use faster than those caches expire. In
that case the `getClaims()` method may receive a JWT signed with a key
ID it doesn't recognize. Instead of failing with an error, it should
reach out directly to the Auth server to verify the JWT.

847 of 1304 branches covered (64.95%)

Branch coverage included in aggregate %.

1296 of 1606 relevant lines covered (80.7%)

76.08 hits per line