Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: improve secret generation for apple idp #7843

Merged
merged 8 commits into from
Apr 26, 2024
Merged

Conversation

livio-a
Copy link
Member

@livio-a livio-a commented Apr 25, 2024

A customer reported that the login with Apple not always works, but often an invalid_client is returned.
We saw duplicate invocation of the callback in the logs, but are missing detailed information.
This PR adds additional logs. Since the authentication is relying on JWT, we also change the iat by 2 seconds into the past to mitigate potential clock skew problems.

Additionally a previous unintended change in the config parsing is removed.

Definition of Ready

  • I am happy with the code
  • Short description of the feature/issue is added in the pr description
  • PR is linked to the corresponding user story
  • Acceptance criteria are met
  • All open todos and follow ups are defined in a new ticket and justified
  • Deviations from the acceptance criteria and design are agreed with the PO and documented.
  • No debug or dead code
  • My code has no repetitions
  • Critical parts are tested automatically
  • Where possible E2E tests are implemented
  • Documentation/examples are up-to-date
  • All non-functional requirements are met
  • Functionality of the acceptance criteria is checked manually on the dev system.

Copy link

vercel bot commented Apr 25, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Apr 26, 2024 3:46pm

Copy link

codecov bot commented Apr 25, 2024

Codecov Report

Attention: Patch coverage is 20.00000% with 4 lines in your changes are missing coverage. Please review.

Project coverage is 62.98%. Comparing base (cc56eea) to head (eeade3a).
Report is 404 commits behind head on main.

Files Patch % Lines
internal/api/ui/login/external_provider_handler.go 0.00% 4 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff             @@
##             main    #7843       +/-   ##
===========================================
+ Coverage   50.10%   62.98%   +12.88%     
===========================================
  Files        1244     1333       +89     
  Lines      117337   110058     -7279     
===========================================
+ Hits        58788    69325    +10537     
+ Misses      55594    36783    -18811     
- Partials     2955     3950      +995     
Flag Coverage Δ
core-integration-tests-postgres 62.98% <20.00%> (+38.55%) ⬆️
core-unit-tests ?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@livio-a livio-a marked this pull request as ready for review April 26, 2024 14:41
@livio-a livio-a requested a review from adlerhurst April 26, 2024 14:59
@livio-a livio-a enabled auto-merge (squash) April 26, 2024 15:24
@livio-a livio-a merged commit 6ab06aa into main Apr 26, 2024
26 of 27 checks passed
@livio-a livio-a deleted the apple-idp-invalid-client branch April 26, 2024 15:46
livio-a added a commit that referenced this pull request Apr 29, 2024
* fix: improve secret generation for apple idp

* remove accidental commit

* change exp time

* change exp time

* change exp time

* change exp time

(cherry picked from commit 6ab06aa)
Copy link

🎉 This PR is included in version 2.51.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants