filip/Stalwart
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change

Browse Source
This commit is contained in:
Maurus Decimus
2026-06-03 18:14:48 +02:00
parent 68946d4f98
commit 838a839290
42 changed files with 506 additions and 298 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/Cargo.toml
View File

@@ -1,6 +1,6 @@
[package]
name = "tests"
version = "0.16.7"
version = "0.16.8"
edition = "2024"
[features]

4
tests/src/system/oidc.rs
View File

@@ -251,7 +251,7 @@ pub async fn test(test: &mut TestServer) {
.await;
assert_eq!(access_introspect.username.unwrap(), "user@example.org");
assert_eq!(access_introspect.token_type.unwrap(), "bearer");
assert_eq!(access_introspect.client_id.unwrap(), client_id);
assert!(access_introspect.client_id.is_none());
assert!(access_introspect.active);
let refresh_introspect = post_with_auth::<OAuthIntrospect>(
&metadata.introspection_endpoint,
@@ -260,7 +260,7 @@ pub async fn test(test: &mut TestServer) {
)
.await;
assert_eq!(refresh_introspect.username.unwrap(), "user@example.org");
assert_eq!(refresh_introspect.client_id.unwrap(), client_id);
assert!(refresh_introspect.client_id.is_none());
assert!(refresh_introspect.active);
assert_eq!(
refresh_introspect.iat.unwrap(),