Skip to content

Handling non-JWT token during OAuth by not caching #328

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Jun 13, 2025

Conversation

tracyboehrer
Copy link
Member

Fixes #325

@Copilot Copilot AI review requested due to automatic review settings June 10, 2025 14:22
@tracyboehrer tracyboehrer requested a review from a team as a code owner June 10, 2025 14:22
@github-actions github-actions bot added the ML: Core Tags changes to core libraries label Jun 10, 2025
@tracyboehrer tracyboehrer enabled auto-merge June 10, 2025 14:22
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This pull request addresses issue #325 by ensuring non-JWT tokens are not cached incorrectly during OAuth. Key changes include distinguishing GitHub tokens by a "gho_" prefix, setting a short expiration for these tokens, and wrapping JWT processing in a try‐catch block to handle parsing failures.

@tracyboehrer tracyboehrer merged commit 3d2db10 into main Jun 13, 2025
8 checks passed
@tracyboehrer tracyboehrer deleted the users/tracyboehrer/non-jwt-token-fix branch June 13, 2025 01:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ML: Core Tags changes to core libraries
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cannot use non JWT tokens from ABS Token Service
3 participants