cliffhall
4a24c4880d
fix(auth): address Copilot review round 2 on the RFC 7009 revocation ( #2144 )
...
- `revokeStoredKeys`' pre-read of `getTokens` sat outside the best-effort
catch. `getTokens` parses through `OAuthTokensSchema`, so a persisted token
that no longer validates rejected and abandoned the local delete `--relogin`
promises — over a grant that could not have been revoked anyway. Caught and
retained as a failed outcome; the clear proceeds.
- The multi-key bookkeeping was wrong twice. A token is now marked spent only
on a `revoked` outcome, so a failed or unsupported attempt no longer skips a
duplicate entry under the other key that may hold the credentials or metadata
that would have worked. And a failure now outranks an earlier success for
reporting, so a stale grant left live cannot be hidden behind the first key's
200.
- `--no-revoke` is now rejected without `--relogin`, ahead of the short-circuit
returns, matching the parser's existing stance on accepted-but-inert flags
(`--strict`). On its own it reads as "this run will not revoke anything",
true only because nothing was being cleared.
- Extracted the App draft merge as `utils/serverWithDraftSettings`, so the rule
has a test. The hook tests receive whatever they are handed and cannot tell a
draft from a persisted entry, and `App.test.tsx`'s settings harness connects
a stdio server where the OAuth section never renders.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0177mPHAdECD18nLLCTwR5rh
Signed-off-by: cliffhall <cliff@futurescale.com>
2026-08-28 01:47:48 -04:00
..
toasts
chore(web): move App.tsx's module-level block into files ( #2127 )
2026-08-26 18:07:40 -04:00
correlateTransportErrors.test.ts
Network: modern Mcp-* headers, new error codes, cancellation-as-abort ( #1628 ) ( #1722 )
2026-07-18 17:32:05 -04:00
correlateTransportErrors.ts
Network: modern Mcp-* headers, new error codes, cancellation-as-abort ( #1628 ) ( #1722 )
2026-07-18 17:32:05 -04:00
customHeaders.test.ts
refactor(web): sharpen the src/lib vs src/utils rule and move misfiled modules ( #1784 )
2026-07-25 22:24:30 -04:00
customHeaders.ts
refactor(web): sharpen the src/lib vs src/utils rule and move misfiled modules ( #1784 )
2026-07-25 22:24:30 -04:00
deepLink.test.ts
web: deep-link auto-connect + machine-readable connection status ( #1576 )
2026-07-11 22:48:28 -04:00
deepLink.ts
web: deep-link auto-connect + machine-readable connection status ( #1576 )
2026-07-11 22:48:28 -04:00
errorFormat.test.ts
chore(web): move App.tsx's module-level block into files ( #2127 )
2026-08-26 18:07:40 -04:00
errorFormat.ts
chore(web): move App.tsx's module-level block into files ( #2127 )
2026-08-26 18:07:40 -04:00
inspectorTabs.test.ts
refactor(web): rename "History" tab/feature to "Protocol" ( #1623 )
2026-07-09 19:04:54 -04:00
inspectorTabs.ts
refactor(web): rename "History" tab/feature to "Protocol" ( #1623 )
2026-07-09 19:04:54 -04:00
jsonObjectDraft.test.ts
fix(web): reject an underflowing literal, and route embedded JSON resources
2026-08-27 06:26:23 -04:00
jsonObjectDraft.ts
fix(web): reject an underflowing literal, and route embedded JSON resources
2026-08-27 06:26:23 -04:00
jsonUtils.test.ts
fix: address Copilot review round 41 — const does not demand a property, required-only branches
2026-08-26 16:08:24 -04:00
jsonUtils.ts
fix: address Copilot review round 41 — const does not demand a property, required-only branches
2026-08-26 16:08:24 -04:00
malformedListReport.test.ts
fix: return the era-parsed tool, and hide aggregate reports in paginated mode ( #1909 )
2026-08-15 20:08:03 -04:00
malformedListReport.ts
fix: return the era-parsed tool, and hide aggregate reports in paginated mode ( #1909 )
2026-08-15 20:08:03 -04:00
maskSecrets.test.ts
feat(network): show auth response bodies with masked secrets + reveal toggle ( #1386 ) ( #1387 )
2026-05-31 08:52:13 -04:00
maskSecrets.ts
feat(network): show auth response bodies with masked secrets + reveal toggle ( #1386 ) ( #1387 )
2026-05-31 08:52:13 -04:00
mcpNetworkHeaders.test.ts
Network: modern Mcp-* headers, new error codes, cancellation-as-abort ( #1628 ) ( #1722 )
2026-07-18 17:32:05 -04:00
mcpNetworkHeaders.ts
Network: modern Mcp-* headers, new error codes, cancellation-as-abort ( #1628 ) ( #1722 )
2026-07-18 17:32:05 -04:00
oauthFlow.test.ts
Auth hardening CI gaps + SDK consolidation: EMA leg 2 / scopes ( #1527 ) ( #1725 )
2026-07-19 22:36:21 -04:00
oauthFlow.ts
Guided-auth removal, OAuth smoke testing, and TUI/CLI support ( #1531 )
2026-06-29 15:35:51 -04:00
oauthNetworkPhase.test.ts
OAuth: re-key store to (server, issuer) + SEP-837/2350/2352 auth UX ( #1694 )
2026-07-16 16:52:53 -04:00
oauthNetworkPhase.ts
OAuth: re-key store to (server, issuer) + SEP-837/2350/2352 auth UX ( #1694 )
2026-07-16 16:52:53 -04:00
oauthUx.test.ts
All of the mid-session and step-up auth work
2026-07-02 16:35:31 -07:00
oauthUx.ts
fix(auth): explicit re-authorize when the OAuth callback state was lost ( #1808 ) ( #1810 )
2026-07-27 18:08:31 -04:00
pendingReauth.test.ts
All of the mid-session and step-up auth work
2026-07-02 16:35:31 -07:00
pendingReauth.ts
refactor(web): sharpen the src/lib vs src/utils rule and move misfiled modules ( #1784 )
2026-07-25 22:24:30 -04:00
replayableProtocolMethods.test.ts
chore(web): address Copilot review on #2127
2026-08-26 18:24:09 -04:00
replayableProtocolMethods.ts
chore(web): address Copilot review on #2127
2026-08-26 18:24:09 -04:00
sandbox-csp.test.ts
fix(web): state the expected shape when dropping a CSP source ( #2064 )
2026-08-24 01:02:02 -04:00
sandbox-csp.ts
docs(web): describe the accepted subset, not "parses as a source expression"
2026-08-24 01:20:18 -04:00
schemaUtils.test.ts
fix: centralize the nullable-union collapse in core and apply it in the TUI
2026-08-15 16:59:37 -04:00
schemaUtils.ts
fix: centralize the nullable-union collapse in core and apply it in the TUI
2026-08-15 16:59:37 -04:00
serverSettingsDefaults.test.ts
chore(web): move App.tsx's module-level block into files ( #2127 )
2026-08-26 18:07:40 -04:00
serverSettingsDefaults.ts
chore(web): move App.tsx's module-level block into files ( #2127 )
2026-08-26 18:07:40 -04:00
serverWithDraftSettings.test.ts
fix(auth): address Copilot review round 2 on the RFC 7009 revocation ( #2144 )
2026-08-28 01:47:48 -04:00
serverWithDraftSettings.ts
fix(auth): address Copilot review round 2 on the RFC 7009 revocation ( #2144 )
2026-08-28 01:47:48 -04:00
stepUp.test.ts
chore(web): move App.tsx's module-level block into files ( #2127 )
2026-08-26 18:07:40 -04:00
stepUp.ts
chore(web): collapse App.tsx's six session refs into useSessionRef ( #2129 )
2026-08-26 20:43:29 -04:00
toolUtils.test.ts
fix: address Copilot review round 40 — a required name counts as a field
2026-08-26 15:49:54 -04:00
toolUtils.ts
fix: address Copilot review round 3 — conjunctive keywords, unflattenable allOf, branch inference
2026-08-26 02:01:44 -04:00
uriTemplate.test.ts
fix: scope the value ceiling to the names a template references
2026-08-17 01:54:37 -04:00
uriTemplate.ts
fix: scope the value ceiling to the names a template references
2026-08-17 01:54:37 -04:00