dev_agentandClaude Opus 5.5 516865ffe1 Reduce ID token verification errors to a fixed category ...

go-oidc's RemoteKeySet puts the JWKS endpoint's response body in its error
for non-200 and malformed 200 responses; Verify wrapped it and the callback
logged it. verifyError now keeps only a fixed category, plus the expiry for
an expired token. A test with a sentinel JWKS body checks it reaches
neither the returned error, the response nor the logs.

Addresses feature-review finding F03-03 on PR #24.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-03 11:28:53 -04:00

..

actor_test.go

Feature 03 task 4: CSRF protection and GET /api/v1/me (#22)

2026-10-03 10:51:26 -04:00

actor.go

Feature 03 task 4: CSRF protection and GET /api/v1/me (#22)

2026-10-03 10:51:26 -04:00

auth_test.go

Reduce ID token verification errors to a fixed category

2026-10-03 11:28:53 -04:00

auth.go

Reduce ID token verification errors to a fixed category

2026-10-03 11:28:53 -04:00

cookie.go

Feature 03 task 1: OIDC login and callback against Authentik (#16)

2026-10-03 09:58:05 -04:00

gate_test.go

Feature 03 task 3: Household group gate and auth middleware (#21)

2026-10-03 10:30:07 -04:00

refused.go

Feature 03 task 3: Household group gate and auth middleware (#21)

2026-10-03 10:30:07 -04:00

session_test.go

Feature 03 task 3: Household group gate and auth middleware (#21)

2026-10-03 10:30:07 -04:00

session.go

Feature 03 task 2: Server-side sessions, cookie and logout (#19)

2026-10-03 10:20:14 -04:00