Recached

hluk / waiverdb

LAST BUILD BRANCH: unbind-ldap-connection
DEFAULT BRANCH: master
Repo Added
Token FGaogxfc451EsLs4fYqx2NtYxBARlHcMv regen
Build 258 Last
Files 48
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH unbind-ldap-connection
branch: SELECT
CHANGE BRANCH
x
Sync Branches

coverage: 83.734%. First build
24889349661

push

github

hluk 
Unbind LDAP connections to prevent file descriptor leaks

ldap.initialize() connections were never explicitly closed, relying on
garbage collection to call ldap_unbind_ext. Add finally blocks to
ensure unbind_s() is called even when exceptions occur.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

264 of 368 branches covered (71.74%)

Branch coverage included in aggregate %.

13 of 13 new or added lines in 1 file covered. (100.0%)

2104 of 2460 relevant lines covered (85.53%)

0.86 hits per line

Relevant lines Covered
2460 RELEVANT LINES 2104 COVERED LINES
0.86 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
24889349661 unbind-ldap-connection Unbind LDAP connections to prevent file descriptor leaks ldap.initialize() connections were never explicitly closed, relying on garbage collection to call ldap_unbind_ext. Add finally blocks to ensure unbind_s() is called even when exceptions occ... push hluk github
83.73
24714794508 ldap-gssapi Drop authlib.jose and use uv sync in Dockerfile Replace authlib.jose.jwt.decode + create_load_key() with simple base64 JWT payload extraction for reading OIDC access token claims. The token was already verified during the OIDC login flow, so cryp... push hluk github
83.71
24710457935 ldap-gssapi Migrate LDAP to new server with GSSAPI authentication Some groups are only available in LDAP, so we cannot rely solely on OIDC token groups. Migrate to new IPA LDAP server with GSSAPI authentication, following the same approach as product-listing... push hluk github
83.71
24400463849 ldap-gssapi Migrate LDAP to new server with GSSAPI authentication Some groups are only available in LDAP, so we cannot rely solely on OIDC token groups. Migrate to new IPA LDAP server with GSSAPI authentication, following the same approach as product-listing... push hluk github
83.54
23886806496 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push hluk github
83.6
23852426946 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push Lukas Holecek github
83.6
23845723617 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push Lukas Holecek github
83.65
23800653172 fix-oidc-groups Fall back to decoded access token for OIDC group extraction When authenticating via the OIDC browser login, the ID token may not include group claims (realm_access.roles) depending on the Keycloak mapper configuration. Decode the access token JWT... push hluk github
83.43
23799209579 fix-oidc-groups Fall back to session ID token for OIDC group extraction When authenticating via the OIDC browser login, the userinfo endpoint may not include provider-specific group claims. This change: - Requests the 'roles' OIDC scope so Keycloak includes rea... push Lukas Holecek github
83.39
23795864800 fix-oidc-groups Fall back to session ID token for OIDC group extraction When authenticating via the OIDC browser login, the userinfo endpoint may not include provider-specific group claims. Try the decoded ID token stored in the session as a fallback before atte... push hluk github
84.03
See All Builds (145)

Badge your Repo: waiverdb

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh