1
43%
main: 43%

Ran 05 Jun 2026 10:32AM UTC

Files 276

Run time 8s

Badge

Embed ▾

Committed 05 Jun 2026 10:26AM UTC coverage: 43.406% (+0.2%) from 43.221%

Job # 27009627415.1

Build Type

Pull #1677

github

Committed by

AmanGIT07

Commit Message

fix(auth): require Bearer/Basic scheme and route exclusively

The Authorization header parser used strings.TrimPrefix, which is a no-op
when the prefix is absent. As a result a bare PAT (no scheme) was treated
as a token, a bare base64 credential was treated as a secret, and every
Bearer header also leaked into the secret slot because both blocks ran
unconditionally. Scheme matching was also case-sensitive, breaking
RFC 7235.

Replace the parser with a small helper that requires the scheme, matches
it case-insensitively via strings.EqualFold, and routes Bearer to
UserTokenGatewayKey and Basic to UserSecretGatewayKey — never both.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1677: fix(auth): require Bearer/Basic scheme and route exclusively

Coverage Stats

16510 of 38036 relevant lines covered (43.41%)

12.21 hits per line

raystack / frontier / 27009627415 / 1
43%
main: 43%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 27009627415.1

raystack / frontier / 27009627415 / 1 43% main: 43%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 27009627415.1

raystack / frontier / 27009627415 / 1
43%
main: 43%

README BADGES
x