4
87%
main: 87%

Ran 09 Jul 2026 07:03AM UTC

Files 9

Run time 0s

Badge

Embed ▾

Committed 09 Jul 2026 06:54AM UTC coverage: 84.568%. Remained the same

Job # 28999966848.4

Build Type

push

github

Committed by

web-flow

Commit Message

refactor(gotrue): drop jwt_decode dependency in favor of dart_jsonwebtoken (#1565)

## What

Removes the `jwt_decode` dependency from `gotrue`. Its two remaining
uses were both unauthenticated payload decodes, which are now handled by
the existing `decodeJwt` helper (built on `dart_jsonwebtoken`, already a
dependency).

## Changes

- `session.dart` — `Jwt.parseJwt(accessToken)['exp']` →
`decodeJwt(accessToken).payload.exp`
- `gotrue_mfa_api.dart` — `Jwt.parseJwt(session.accessToken)` →
`decodeJwt(session.accessToken).payload.claims` (keeps `aal`/`amr`
lookups working)
- `gotrue_client.dart` — dropped the now-unused `jwt_decode` import
- `client_test.dart` — updated assertions to use
`decodeJwt(...).payload.exp`
- `pubspec.yaml` — removed `jwt_decode: ^0.3.1`

Signature verification via `dart_jsonwebtoken`'s `JWT.verify` is
untouched. Behavior is preserved: both replaced uses were plain payload
decodes without verification.

`dart pub get` resolves cleanly (no `jwt_decode` in the lock) and `dart
analyze lib test` reports no issues.

Closes SDK-475.

Coverage Stats

548 of 648 relevant lines covered (84.57%)

4.98 hits per line

supabase / supabase-flutter / 28999966848 / 4
87%
main: 87%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job postgrest - 28999966848.4

supabase / supabase-flutter / 28999966848 / 4 87% main: 87%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job postgrest - 28999966848.4

supabase / supabase-flutter / 28999966848 / 4
87%
main: 87%

README BADGES
x