summercms

golem15/summercms

Fork 0

Commit Graph

Author	SHA1	Message	Date
Jakub Zych	dd167466d2	test(19.4-04): unit tests for wristband's OIDC flavour - PHP protocol cases, one subtest per PHP method: TestPKCEVerifier, TestRedirectURIMatch, TestTokenIssuer, TestAuthCodeLifecycle, TestPKCEAndReplay, TestConsentCSRF (cases 1-5) - Go-only behaviour: discovery bytes, JWKS shapes, PEM parsing, ES256 and mixed rings, validation order, repeated parameters, PHP encoding, resume, switch account, JSON consent, client authentication, uniform userinfo 401, pairwise subjects, opt-in refresh, kind isolation, flavour dispatch, SetOIDCBackend checks, MCP refuses openid - every name required by the gate's go stage	2026-10-19 21:05:21 +02:00
Jakub Zych	028e8da7e8	test(19.4-04): fail-closed phase gate across the four repositories - scripts/check-phase19.4.sh: go, plugin, userplugin, fonoteka, docker, parity and docs stages; go test -json detectors refuse a fail, a skip, zero tests or a missing name - additive check on the user plugin since c077029; NOT RUN rules for docker and parity proven on a faked host by --self-test - required names: the smoke tests of plans 01-03	2026-10-19 20:54:10 +02:00

Author

SHA1

Message

Date

Jakub Zych

dd167466d2

test(19.4-04): unit tests for wristband's OIDC flavour

- PHP protocol cases, one subtest per PHP method: TestPKCEVerifier,
  TestRedirectURIMatch, TestTokenIssuer, TestAuthCodeLifecycle,
  TestPKCEAndReplay, TestConsentCSRF (cases 1-5)
- Go-only behaviour: discovery bytes, JWKS shapes, PEM parsing, ES256 and
  mixed rings, validation order, repeated parameters, PHP encoding,
  resume, switch account, JSON consent, client authentication, uniform
  userinfo 401, pairwise subjects, opt-in refresh, kind isolation,
  flavour dispatch, SetOIDCBackend checks, MCP refuses openid
- every name required by the gate's go stage

2026-10-19 21:05:21 +02:00

Jakub Zych

028e8da7e8

test(19.4-04): fail-closed phase gate across the four repositories

- scripts/check-phase19.4.sh: go, plugin, userplugin, fonoteka, docker,
  parity and docs stages; go test -json detectors refuse a fail, a skip,
  zero tests or a missing name
- additive check on the user plugin since c077029; NOT RUN rules for
  docker and parity proven on a faked host by --self-test
- required names: the smoke tests of plans 01-03

2026-10-19 20:54:10 +02:00

2 Commits