gazagnaire.org / ocaml-oauth
OAuth 2.0 authorization and token exchange
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

Replace dead sha256 fallback with failwith; skip untrusted TS receipts

- compute_proof: None branch was dead code producing a predictable
hash. Now fails explicitly.
- verify_receipts: untrusted TSes (ts_keys returns None) are skipped
instead of rejecting the entire bundle. Fails only if no receipt
from a trusted TS verifies. Matches the cross-signing promise in
the .mli documentation.

Thomas Gazagnaire 811c85fd 9493f77e

+1 -1
+1 -1
fuzz/fuzz_github_oauth.ml
··· 83 83 check (c1 = c2) 84 84 85 85 let suite = 86 - ( "oauth", 86 + ( "github_oauth", 87 87 [ 88 88 test_case "authorization_url valid" 89 89 [ bytes; bytes; list bytes ]