Skip to content

v0.2.0 — Tests, CI & security hardening

Choose a tag to compare

View all tags
@ClementRingot ClementRingot released this 11 Jun 07:39
· 146 commits to main since this release
v0.2.0
0fac844

Added

  • Unit test suite (Vitest, 68 tests) over the security-critical pure modules: OAuth state codec, stateless DCR store, redirect-URI allowlist/validation, tool schemas, config parsing, chained token verifier.
  • npm test / npm run test:watch + vitest.config.ts.
  • CI workflow (lint + test + build) on push/PR.
  • ABAP service sources (abap/) and long-form docs (docs_page/).

Changed

  • API-key auth now uses constant-time comparison (hash + timingSafeEqual) instead of ===.
  • OIDC verifier warns when OIDC_AUDIENCE is unset (audience then not validated).
  • Centralised the server version; tool descriptions sourced from the TOOLS registry.
  • Corrected stale doc comments; lint is now clean.

Full changelog: v0.1.0...v0.2.0

Assets 2
Loading