[FEATURE] Conditionner la validation des AT utilisateurs en comparant l’aud des AT utilisateurs à la forwardedOrigin (PIX-15944)#11208

Open

lego-technix wants to merge 9 commits intodevfrom pix-15944-check-audience-in-AT-for-authentication

+1,094-1,413

Commits on Jan 27, 2025

refactor(api): rewrite some functions exit-first style

lego-technix
authored and
P-Jeremy
committed
test(api): add new generateAuthenticatedUserRequestHeaders helper

lego-technix
authored and
P-Jeremy
committed
feat(api): validate audience of non-anonymous user Access Tokens

lego-technix
authored and
P-Jeremy
committed
test(api): in unit tests use new generateAuthenticatedUserRequestHeaders helper to have a valid authentication through a user Access Tokens now with audience

lego-technix
authored and
P-Jeremy
committed
test(api): in integration tests use new generateAuthenticatedUserRequestHeaders helper to have a valid authentication through a user Access Tokens now with audience

lego-technix
authored and
P-Jeremy
committed
test(api): in acceptance tests use new generateAuthenticatedUserRequestHeaders helper to have a valid authentication through a user Access Tokens now with audience

lego-technix
authored and
P-Jeremy
committed
test(api): remove now useless unused generateValidRequestAuthorizationHeader helper

lego-technix
authored and
P-Jeremy
committed
test(api): enable isUserTokenAudConfinementEnabled for tests in config

lego-technix
authored and
P-Jeremy
committed
test(api): add missing tests for authentication
P-Jeremy
committed