dev_agentandClaude Opus 5.5 516865ffe1 Reduce ID token verification errors to a fixed category ...

go-oidc's RemoteKeySet puts the JWKS endpoint's response body in its error
for non-200 and malformed 200 responses; Verify wrapped it and the callback
logged it. verifyError now keeps only a fixed category, plus the expiry for
an expired token. A test with a sentinel JWKS body checks it reaches
neither the returned error, the response nor the logs.

Addresses feature-review finding F03-03 on PR #24.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-03 11:28:53 -04:00

..

auth

Reduce ID token verification errors to a fixed category

2026-10-03 11:28:53 -04:00

config

Feature 03 task 5: Trusted proxy handling for forwarded headers (#23)

2026-10-03 11:05:33 -04:00

db

Feature 02 task 4: sqlc configuration and core queries (#13)

2026-10-03 09:15:40 -04:00

forwarded

Feature 03 task 5: Trusted proxy handling for forwarded headers (#23)

2026-10-03 11:05:33 -04:00

frontend

Feature 01 task 3: Embed the PWA build with SPA fallback (#4)

2026-10-02 22:47:01 -04:00

secureurl

Feature 03 task 1: OIDC login and callback against Authentik (#16)

2026-10-03 09:58:05 -04:00

server

Feature 03 integration fix: sanitize discovery errors and narrow CSRF exemption (#25)

2026-10-03 11:22:53 -04:00

store

Feature 02 integration fix: repository coverage and boot-path tests (#15)

2026-10-03 09:27:22 -04:00