Aleksei Sviridkin 09a658d43b test(dashboard): pin JWT verification in the token proxy ...

Only the cold-start path of verifyAndParseJWT was tested; every other
test served an empty JWKS, so no token was ever verified and a change
that weakened verification would have passed. Cover a valid token and
the ones that must be refused: expired, not yet valid, signed by
another key, unknown or missing kid, alg none, and HS256 keyed with
the RSA public key.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-24 16:55:02 +03:00

..

apps

feat(kubernetes): boot tenant worker disks from a shared golden Talos image (CDI clone) (#4171)

2026-09-24 12:10:07 +05:00

core

fix(e2e-sandbox): install mc from its GitHub release

2026-09-24 16:55:02 +03:00

extra

fix(ingress): trust CF-Connecting-IP only from Cloudflare ranges

2026-09-24 16:04:27 +03:00

library

fix(backups): give the sidecar sizing its reason per caller

2026-09-18 17:30:20 +04:00

system

test(dashboard): pin JWT verification in the token proxy

2026-09-24 16:55:02 +03:00

tests/cozy-lib-tests

fix(cozy-lib): guard fractional-negative minReplicaCount and cover the pause-merge collision

2026-09-10 15:31:24 +03:00