rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Expect verified email in OAuth2 ID token e2e

Browse Source 
E2E owners confirm email during setup so password re-login works,
so ID token claim assertions must expect email_verified true.

Signed-off-by: Émile Ré <emile@probo.com>
This commit is contained in:
Émile Ré
2026-07-28 10:55:36 +02:00
parent b64f101ab9
commit d08e4c3314
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
e2e/console/oauth2_test.go
View File

@@ -2515,8 +2515,8 @@ func TestOAuth2_IDTokenClaims(t *testing.T) {
"ID token must contain email when email scope is requested")
require.NotNil(t, claims.EmailVerified,
"ID token must contain email_verified when email scope is requested")
assert.False(t, *claims.EmailVerified,
"email_verified must be false for unverified e2e test identity")
assert.True(t, *claims.EmailVerified,
"email_verified must reflect the verified e2e test identity")
assert.NotEmpty(t, claims.Name,
"ID token must contain name when profile scope is requested")
},
@@ -2607,8 +2607,8 @@ func TestOAuth2_IDTokenClaims(t *testing.T) {
"refresh ID token must contain email when email scope is present")
require.NotNil(t, claims.EmailVerified,
"refresh ID token must contain email_verified when email scope is present")
assert.False(t, *claims.EmailVerified,
"email_verified must be false for unverified e2e test identity")
assert.True(t, *claims.EmailVerified,
"email_verified must reflect the verified e2e test identity")
assert.NotEmpty(t, claims.Name,
"refresh ID token must contain name when profile scope is present")
},