Skip to content

test(verify): send the OAuth state binding with harness callbacks - #298

Merged
Bccorb merged 1 commit into
mainfrom
fix/harness-oauth-binding
Oct 21, 2026
Merged

Bccorb merged 1 commit into
mainfrom
fix/harness-oauth-binding

Conversation

@Bccorb

@Bccorb Bccorb commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Refs fells-code/seamless-auth-api#463

The auth API (fells-code/seamless-auth-api#465) now returns a binding from POST /oauth/:providerId/start and requires it in the POST /oauth/:providerId/callback body. The verify harness posts OAuth callbacks by hand, so oauthLogin (flows.ts) and legacySignIn (cutoverFlows.ts) now forward the binding from the start response.

Safe to merge before the API releases: older API images strip the unknown field, and the harness does not assert that binding is present (an absent value is dropped from the JSON body). The mock OIDC server only echoes state and needs no change. Patch changeset included since the harness ships with seamless verify.

@Bccorb
Bccorb merged commit 412aae6 into main Oct 21, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant