Jakub Zych 18b2e85106 feat(09-01): reject cross-audience tokens on both guards ...

- Frontend verification accepts a missing audience for PHP tokens
- An explicit audience must match the guard, even when the secret is shared

2026-09-24 17:20:57 +02:00

..

audience_test.go

test(09-01): add failing audience crossover and authorization-order tests

2026-09-24 17:19:57 +02:00

blacklist_test.go

test(07-01): add failing tests for JWT lifecycle primitives

2026-09-22 13:33:37 +02:00

blacklist.go

feat(07-01): add JWT mint, refresh, and blacklist primitives

2026-09-22 13:34:58 +02:00

context_test.go

test(07-01): add failing tests for JWT lifecycle primitives

2026-09-22 13:33:37 +02:00

context.go

feat(09-01): implement separate-admin genre list tracer

2026-09-24 17:17:19 +02:00

guard.go

feat(06-01): grow router verbs, factories, and guard registry

2026-09-19 18:59:12 +02:00

jwt_guard_test.go

test(07-01): add failing tests for JWT lifecycle primitives

2026-09-22 13:33:37 +02:00

jwt_test.go

test(06-14): regression coverage for surf and bouncer gap closure

2026-09-21 19:47:16 +02:00

jwt.go

feat(09-01): reject cross-audience tokens on both guards

2026-09-24 17:20:57 +02:00

mint_test.go

test(07-01): add failing tests for JWT lifecycle primitives

2026-09-22 13:33:37 +02:00

mint.go

feat(09-01): implement separate-admin genre list tracer

2026-09-24 17:17:19 +02:00

password_test.go

test(07-01): add failing tests for passwords, locale, and validation

2026-09-22 13:36:08 +02:00

password.go

feat(07-01): add bcrypt, locale override, and validation rules

2026-09-22 13:39:25 +02:00

phase07_coverage_test.go

feat(07-06): prove mint, refresh, and blacklist under concurrency

2026-09-22 19:20:14 +02:00

refresh_test.go

test(07-01): add failing tests for JWT lifecycle primitives

2026-09-22 13:33:37 +02:00

refresh.go

feat(09-01): implement separate-admin genre list tracer

2026-09-24 17:17:19 +02:00

registry_coverage_test.go

test(06-05): close framework coverage gaps in bouncer, surf, wire, fetchguard

2026-09-19 21:08:04 +02:00

registry_test.go

feat(07-01): add JWT mint, refresh, and blacklist primitives

2026-09-22 13:34:58 +02:00

registry.go

fix(06-12): reject typed-nil guards and fractional JWT subjects

2026-09-21 19:43:35 +02:00