1
60%
main: 60%

Ran 23 Jan 2026 06:32PM UTC

Files 467

Run time 9s

Badge

Embed ▾

Committed 23 Jan 2026 06:24PM UTC coverage: 60.033% (+0.04%) from 59.991%

Job # 21296732547.1

Build Type

push

github

Committed by

web-flow

Commit Message

Add KeyManager for signing key lifecycle to authserver (#3407)

* Add KeyProvider interface for signing key management

Introduces a KeyProvider interface with two implementations:
FileProvider loads a PEM key from disk (for production), and
GeneratingProvider creates an ephemeral key on first access (for
development). Configuration is via TOOLHIVE_AUTH_SIGNING_KEY_FILE
env var - when set, the key is loaded from that path; when unset,
an ephemeral key is generated.

At authserver startup, the server will call ConfigFromEnv() and
NewProviderFromConfig() to obtain a KeyProvider. In Kubernetes
deployments, the signing key is mounted from a Secret and the env
var points to the mounted path. The provider's SigningKey() method
returns the key for JWT signing, while PublicKeys() provides the
JWKS endpoint data.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* Document multi-replica key rotation flow in FallbackKeyFiles comment

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Run Details

37322 of 62169 relevant lines covered (60.03%)

78.1 hits per line

stacklok / toolhive / 21296732547 / 1
60%
main: 60%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21296732547.1

stacklok / toolhive / 21296732547 / 1 60% main: 60%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21296732547.1

stacklok / toolhive / 21296732547 / 1
60%
main: 60%

README BADGES
x