Skip to content

JWT validation does not enforce iss or aud claims#3553

Open
alexanderkiel wants to merge 1 commit intomainfrom
3552-jwt-validation-does-not-enforce-iss-or-aud-claims
Open

JWT validation does not enforce iss or aud claims#3553
alexanderkiel wants to merge 1 commit intomainfrom
3552-jwt-validation-does-not-enforce-iss-or-aud-claims

Conversation

@alexanderkiel
Copy link
Copy Markdown
Member

Closes: #3552

@alexanderkiel alexanderkiel linked an issue Apr 10, 2026 that may be closed by this pull request
@alexanderkiel alexanderkiel self-assigned this Apr 10, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 10, 2026

Codecov Report

❌ Patch coverage is 95.45455% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 96.02%. Comparing base (4d6aba1) to head (09b7ed5).
⚠️ Report is 3 commits behind head on main.

Files with missing lines Patch % Lines
modules/openid-auth/src/blaze/openid_auth.clj 92.85% 0 Missing and 1 partial ⚠️
Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #3553      +/-   ##
==========================================
+ Coverage   96.01%   96.02%   +0.01%     
==========================================
  Files         410      410              
  Lines       25541    25556      +15     
  Branches      645      641       -4     
==========================================
+ Hits        24522    24539      +17     
  Misses        487      487              
+ Partials      532      530       -2     
Files with missing lines Coverage Δ
modules/openid-auth/src/blaze/openid_auth/impl.clj 98.00% <100.00%> (ø)
modules/openid-auth/src/blaze/openid_auth/spec.clj 100.00% <100.00%> (ø)
modules/openid-auth/src/blaze/openid_auth.clj 97.05% <92.85%> (+1.40%) ⬆️

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@alexanderkiel alexanderkiel force-pushed the 3552-jwt-validation-does-not-enforce-iss-or-aud-claims branch from f061c99 to 298e9f7 Compare April 10, 2026 15:15
@alexanderkiel alexanderkiel requested a review from EmteZogaf April 10, 2026 15:20
@alexanderkiel alexanderkiel force-pushed the 3552-jwt-validation-does-not-enforce-iss-or-aud-claims branch from 298e9f7 to cb6976e Compare April 10, 2026 15:28
EmteZogaf
EmteZogaf previously approved these changes Apr 10, 2026
Copy link
Copy Markdown
Collaborator

@EmteZogaf EmteZogaf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@alexanderkiel alexanderkiel force-pushed the 3552-jwt-validation-does-not-enforce-iss-or-aud-claims branch from cb6976e to 09b7ed5 Compare April 10, 2026 18:05
@alexanderkiel alexanderkiel requested a review from EmteZogaf April 10, 2026 20:08
Copy link
Copy Markdown
Collaborator

@EmteZogaf EmteZogaf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

JWT validation does not enforce iss or aud claims

2 participants