summercms

Files

Jakub Zych f4259560c2 test(08-10): close wristband 103-method PHP audit gaps

- register loopback http:// acceptance, javascript: URI rejection, and
  error-body no-secret/no-stack-trace evidence
- token-exchange plain PKCE rejection even when verifier equals the
  stored (non-S256) challenge

2026-09-24 00:05:41 +02:00

authorize_test.go

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00

authorize.go

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00

client_issue.go

feat(08-07): wire repeatable bonfire flags and export client-issuing helpers

2026-09-23 21:56:00 +02:00

consent_test.go

feat(08-05): add wristband consent issue/deny operations

2026-09-23 20:59:24 +02:00

consent.go

feat(08-05): add wristband consent issue/deny operations

2026-09-23 20:59:24 +02:00

crypto.go

test(08-02): add failing RFC 7591 registration RED test in wristband

2026-09-23 19:37:03 +02:00

phase08_coverage_test.go

test(08-10): close wristband 103-method PHP audit gaps

2026-09-24 00:05:41 +02:00

redirect_html.go

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00

registration_test.go

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00

server_test.go

feat(08-01): implement exact RFC 8414 metadata writer in wristband

2026-09-23 19:10:26 +02:00

server.go

feat(08-05): add wristband consent issue/deny operations

2026-09-23 20:59:24 +02:00

stores.go

test(08-06): add failing refresh-lifecycle RED anchor and store interface

2026-09-23 21:26:05 +02:00

token_test.go

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00

token.go

fix(08-09): match wristband OAuth byte contract to live-recorded PHP

2026-09-23 23:12:02 +02:00