1
60%
main: 60%

Ran 13 Jan 2026 11:55AM UTC

Files 438

Run time 13s

Badge

Embed ▾

Committed 13 Jan 2026 11:51AM UTC coverage: 58.063% (+0.09%) from 57.97%

Job # 20955677299.1

Build Type

push

github

Committed by

web-flow

Commit Message

Add upstream Identity Provider types and interfaces (#3260)

* Add upstream Identity Provider types and interfaces

Introduce foundational types for communicating with upstream Identity
Providers (e.g. Google) in the authorization server:

- Provider interface: abstracts IDP operations (authorization URL
  generation, code exchange, token refresh, userinfo)
- IDTokenNonceValidator: optional interface for OIDC nonce validation
  to prevent replay attacks
- UserInfoSubjectValidator: optional interface for OIDC Section 5.3.4
  subject validation to prevent impersonation
- Tokens: represents access/refresh/ID tokens from upstream IDP
- IDTokenClaims: parsed OIDC ID token claims including azp for
  multi-audience token validation
- Config: upstream IDP connection configuration with redirect URI validation

These types are implemented by OIDCProvider in the full authorization
server and used for token exchange flows where the auth server acts
as an OAuth client to upstream IDPs.

* Remove unused http client

In a future commit when we actually make use of the itnerface, we'll
rather use one from toolhive's networking package

Run Details

34372 of 59198 relevant lines covered (58.06%)

82.02 hits per line

stacklok / toolhive / 20955677299 / 1
60%
main: 60%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 20955677299.1

stacklok / toolhive / 20955677299 / 1 60% main: 60%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 20955677299.1

stacklok / toolhive / 20955677299 / 1
60%
main: 60%

README BADGES
x