quality(coverage): measure OIDC verification core - #404

Merged

seonghobae merged 25 commits into

mainfrom

quality/oidc-core-coverage-slice

Aug 17, 2026

Commits on Aug 16, 2026

test(coverage): require OIDC core instrumentation
seonghobae
committed
8998453
fix(coverage): measure OIDC verification core
seonghobae
committed
e66c880
test(coverage): preserve canonical index newline
seonghobae
committed
4c77e15
fix(coverage): restore canonical index newline
seonghobae
committed
da6af5b
test(oidc): distinguish malformed upstream documents
seonghobae
committed
a8cab93
fix(oidc): classify malformed upstream JSON correctly
seonghobae
committed
5260b95
test(oidc): fail closed on malformed upstream schemas
seonghobae
committed
bb97c29
fix(oidc): validate upstream discovery and JWKS schemas
seonghobae
committed
81b5e72
test(security): reject off-origin OIDC JWKS discovery
seonghobae
committed
39942da
fix(security): pin OIDC JWKS to trusted GitHub origin
seonghobae
committed
cd22d83

Commits on Aug 17, 2026

merge(main): integrate acquisition hardening into OIDC coverage slice
seonghobae
committed
09ef1a1
test(oidc): cover empty JWKS discovery URI
seonghobae
committed
82114ce
test(oidc): cover expired JWKS cache refresh
seonghobae
committed
a311051
test(oidc): expose upstream network failure misclassification
seonghobae
committed
511ccb8
fix(oidc): classify upstream transport failures
seonghobae
committed
53518e3
test(oidc): cover upstream HTTP status failures
seonghobae
committed
338c6ff
test(oidc): cover null JWKS document boundary
seonghobae
committed
4a5b4d7
test(oidc): cover residual verification branches
seonghobae
committed
ecfaeca
test(oidc): reject malformed JWKS key entries
seonghobae
committed
b77ee98
fix(oidc): validate JWKS key entry shapes
seonghobae
committed
378e8fc
test(oidc): reject incomplete RSA JWKS entries upstream
seonghobae
committed
4578475
fix(oidc): classify invalid JWKS key material upstream
seonghobae
committed
3157107
fix(oidc): classify unusable JWKS keys upstream
seonghobae
committed
9a8359e
test(oidc): exercise fresh JWKS cache reuse
seonghobae
committed
cdf5018
test(oidc): cover residual claim rejection branches
seonghobae
committed
43af290