Skip to content

Guard Y309 device-code login without a callback - #112

Open
Parker-fi wants to merge 1 commit into
mainfrom
case/y309
Open

Parker-fi wants to merge 1 commit into
mainfrom
case/y309

Conversation

@Parker-fi

Copy link
Copy Markdown
Contributor

Adds an API-only regression case for Y309 / T6745.

The case verifies its authenticated approver and anonymous client prerequisites in code, then requests a device code, resolves a lower-case separator-free user code, approves the request, exchanges it for a bearer token, and proves that token belongs to the approver. Issued credentials are excluded from artifacts and the token is revoked during cleanup.

Local comparison:

  • 0bbb18a37c: regression / present; device-code issuance returned 404
  • f0624c29b3: pass / absent
  • develop at d0acf0ff77: pass / absent

Validation: pnpm check (107 cases).

@CLAassistant

CLAassistant commented Aug 25, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants