rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Expect verified email in OAuth2 ID token e2e

Browse Source 
E2E owners confirm email during setup so password re-login works,
so ID token claim assertions must expect email_verified true.

Signed-off-by: Émile Ré <emile@probo.com>
This commit is contained in:
Émile Ré
2026-07-28 10:55:36 +02:00
parent b64f101ab9
commit d08e4c3314
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
e2e/console/oauth2_test.go
View File

@@ -2515,8 +2515,8 @@ func TestOAuth2_IDTokenClaims(t *testing.T) {
"ID token must contain email when email scope is requested") "ID token must contain email when email scope is requested")
require.NotNil(t, claims.EmailVerified, require.NotNil(t, claims.EmailVerified,
"ID token must contain email_verified when email scope is requested") "ID token must contain email_verified when email scope is requested")
assert.False(t, *claims.EmailVerified, assert.True(t, *claims.EmailVerified,
"email_verified must be false for unverified e2e test identity") "email_verified must reflect the verified e2e test identity")
assert.NotEmpty(t, claims.Name, assert.NotEmpty(t, claims.Name,
"ID token must contain name when profile scope is requested") "ID token must contain name when profile scope is requested")
}, },
@@ -2607,8 +2607,8 @@ func TestOAuth2_IDTokenClaims(t *testing.T) {
"refresh ID token must contain email when email scope is present") "refresh ID token must contain email when email scope is present")
require.NotNil(t, claims.EmailVerified, require.NotNil(t, claims.EmailVerified,
"refresh ID token must contain email_verified when email scope is present") "refresh ID token must contain email_verified when email scope is present")
assert.False(t, *claims.EmailVerified, assert.True(t, *claims.EmailVerified,
"email_verified must be false for unverified e2e test identity") "email_verified must reflect the verified e2e test identity")
assert.NotEmpty(t, claims.Name, assert.NotEmpty(t, claims.Name,
"refresh ID token must contain name when profile scope is present") "refresh ID token must contain name when profile scope is present")
}, },