From 30680d26be33427e207cb0b96276ccc384088c8d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 16:47:27 +0000 Subject: [PATCH 1/2] fix(deps): bump super-linter/super-linter/slim from 8.1.0 to 9.0.0 Bumps [super-linter/super-linter/slim](https://github.com/super-linter/super-linter) from 8.1.0 to 9.0.0. - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](https://github.com/super-linter/super-linter/compare/ffde3b2b33b745cb612d787f669ef9442b1339a6...2da136927bd4a73596db63044b504547c62cb854) --- updated-dependencies: - dependency-name: super-linter/super-linter/slim dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 336fe95..b2eca4d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -47,7 +47,7 @@ jobs: fetch-depth: 0 # needed for super-linter - name: Lint codebase - uses: super-linter/super-linter/slim@ffde3b2b33b745cb612d787f669ef9442b1339a6 # v8.1.0 + uses: super-linter/super-linter/slim@2da136927bd4a73596db63044b504547c62cb854 # v9.0.0 env: IGNORE_GITIGNORED_FILES: true FILTER_REGEX_INCLUDE: .*src/.*, .*test/.* From bd4e5238cf027c6f32d07f8468cdee93cb54204e Mon Sep 17 00:00:00 2001 From: Granit Mullahasani Dula <156331405+gdulafactset@users.noreply.github.com> Date: Wed, 28 Oct 2026 10:58:28 +0000 Subject: [PATCH 2/2] fix: lint issues --- .github/linters/.jscpd.json | 2 +- src/test/resources/invalidJwkKtyTypo.json | 38 ++--- src/test/resources/invalidJwkMissingP.json | 38 ++--- .../resources/well-known-uri-response.json | 158 ++++++++++++++---- 4 files changed, 160 insertions(+), 76 deletions(-) diff --git a/.github/linters/.jscpd.json b/.github/linters/.jscpd.json index 33c7766..a550b93 100644 --- a/.github/linters/.jscpd.json +++ b/.github/linters/.jscpd.json @@ -1,3 +1,3 @@ { - "threshold": 5 + "threshold": 5 } diff --git a/src/test/resources/invalidJwkKtyTypo.json b/src/test/resources/invalidJwkKtyTypo.json index 27791b8..7d63312 100644 --- a/src/test/resources/invalidJwkKtyTypo.json +++ b/src/test/resources/invalidJwkKtyTypo.json @@ -1,21 +1,19 @@ { - "name": "testName", - "clientId": "testClientId", - "clientAuthType": "testAuthType", - "owners": [ - "testOwners" - ], - "jwk": { - "p": "-y0YLv7K6cvmu9sJSyXJbjHQgqpJMkqWF8El5MSCnUpFvFd-qHDBXNGJfbol-bcomfVxiuUAxSDnyARNzoo_nDXeEDSu_4hZ82EcHeU5Mqb9hpmiy9QeMUPO__l-PIfMOH4d1ih6O84ARIpHLOx5kSfADesDyM5NgjFcbyN9CYM", - "ktyx": "RSA", - "q": "zNBNdbcN4aIBMw7YHGRr2Ype3lLckyFPozPgb11gs3bYTryE9A2to3Ik9Wu6rNF9V6pemf6j1jEGpX_z3Gx4EW9deY69-XdHch4ZqrSgEW1o2iykwwD1C4ocwZDRPrwg2IHxffoFOL5PUfsFRt5LA3W9h8UC_bN39yt4N5N11_c", - "e": "AQAB", - "use": "sig", - "kid": "5t-FNLBU_yFN-Vk8TUTVsZII2g40uD5grosbn4-NFPE", - "qi": "BDiiruwR4YHkHyvXQ3rNtTIf0uM9pr-zI1EDPuKh478NLsiY0MJY_0ntrBCXeto6x-dRcgZduCAiG7PHLLeN4NIpjTl1hZUg3L8z29MA3rTtvRu1DR5aNUwtjewg-HC-B9AfLa35Pnq7a4d047gcRlb_QQt83YgqDTdqkK0z0wA", - "dp": "nDVhUujW3SwYJUCFuRyY91U3reuldgd47PEMVgf4i0XDtOxdMvhc6RLPhUedkn3cXFOO96iQIAjk3ToAAbFs-gNuRXneU8FC39_HEriaJ-w-w9UMr-MNm-nl9L__SDnUQlX8zFGEI2lsNTQiK8gtmp60DHPaeKoE_jEgoWXav20", - "alg": "RS256", - "dq": "XBedfLyehUHvACJAkiOlSt-o4Japj45-3IdK90gpXwilImIp9gLgfImqjJ-wBFz92xlECEIzMPBCaNAruoUbR9unUC0axr0XZvyZ1eP5xVxItTE1tGkNxe6IF5EiRO8aZb-n8lklV-paiCYyrTbuy9N5MT8opSK5Ym4tU-_-IOk", - "n": "yPRP6Si1wj9VFjiFCvE5AmWAz47GHHRvNNe-fPo3C5lrWiOHCiBr_YshTSjio1qrLzA_4lVW6XAo0hoT57ze3Whc6Jj7FDOy9SnZyUZY07_xHKwdsHQnwP3_h2Ofl8Th51XTBNIVCqlmR4cQmRPoM7xeJEfje_6zpMIoMDqT8eoGfG5CI6YKlD2CuvN3apbvRcpUqqtu9zozy05mByH8bC-UCWSw46jvJvbuUc904csBTq3BU7-UyPZBSE6Pje6qfKX97nV58t6uI7neHW-vBgXcm72kfQ9W5hY-FByWSF3NbsTEvR_MdgNpTQaKZug_urIeQU5FkVlcwP3J0oAyZQ" - } -} \ No newline at end of file + "name": "testName", + "clientId": "testClientId", + "clientAuthType": "testAuthType", + "owners": ["testOwners"], + "jwk": { + "p": "-y0YLv7K6cvmu9sJSyXJbjHQgqpJMkqWF8El5MSCnUpFvFd-qHDBXNGJfbol-bcomfVxiuUAxSDnyARNzoo_nDXeEDSu_4hZ82EcHeU5Mqb9hpmiy9QeMUPO__l-PIfMOH4d1ih6O84ARIpHLOx5kSfADesDyM5NgjFcbyN9CYM", + "ktyx": "RSA", + "q": "zNBNdbcN4aIBMw7YHGRr2Ype3lLckyFPozPgb11gs3bYTryE9A2to3Ik9Wu6rNF9V6pemf6j1jEGpX_z3Gx4EW9deY69-XdHch4ZqrSgEW1o2iykwwD1C4ocwZDRPrwg2IHxffoFOL5PUfsFRt5LA3W9h8UC_bN39yt4N5N11_c", + "e": "AQAB", + "use": "sig", + "kid": "5t-FNLBU_yFN-Vk8TUTVsZII2g40uD5grosbn4-NFPE", + "qi": "BDiiruwR4YHkHyvXQ3rNtTIf0uM9pr-zI1EDPuKh478NLsiY0MJY_0ntrBCXeto6x-dRcgZduCAiG7PHLLeN4NIpjTl1hZUg3L8z29MA3rTtvRu1DR5aNUwtjewg-HC-B9AfLa35Pnq7a4d047gcRlb_QQt83YgqDTdqkK0z0wA", + "dp": "nDVhUujW3SwYJUCFuRyY91U3reuldgd47PEMVgf4i0XDtOxdMvhc6RLPhUedkn3cXFOO96iQIAjk3ToAAbFs-gNuRXneU8FC39_HEriaJ-w-w9UMr-MNm-nl9L__SDnUQlX8zFGEI2lsNTQiK8gtmp60DHPaeKoE_jEgoWXav20", + "alg": "RS256", + "dq": "XBedfLyehUHvACJAkiOlSt-o4Japj45-3IdK90gpXwilImIp9gLgfImqjJ-wBFz92xlECEIzMPBCaNAruoUbR9unUC0axr0XZvyZ1eP5xVxItTE1tGkNxe6IF5EiRO8aZb-n8lklV-paiCYyrTbuy9N5MT8opSK5Ym4tU-_-IOk", + "n": "yPRP6Si1wj9VFjiFCvE5AmWAz47GHHRvNNe-fPo3C5lrWiOHCiBr_YshTSjio1qrLzA_4lVW6XAo0hoT57ze3Whc6Jj7FDOy9SnZyUZY07_xHKwdsHQnwP3_h2Ofl8Th51XTBNIVCqlmR4cQmRPoM7xeJEfje_6zpMIoMDqT8eoGfG5CI6YKlD2CuvN3apbvRcpUqqtu9zozy05mByH8bC-UCWSw46jvJvbuUc904csBTq3BU7-UyPZBSE6Pje6qfKX97nV58t6uI7neHW-vBgXcm72kfQ9W5hY-FByWSF3NbsTEvR_MdgNpTQaKZug_urIeQU5FkVlcwP3J0oAyZQ" + } +} diff --git a/src/test/resources/invalidJwkMissingP.json b/src/test/resources/invalidJwkMissingP.json index 01b960d..f4188f7 100644 --- a/src/test/resources/invalidJwkMissingP.json +++ b/src/test/resources/invalidJwkMissingP.json @@ -1,21 +1,19 @@ { - "name": "testName", - "clientId": "testClientId", - "clientAuthType": "testAuthType", - "owners": [ - "testOwners" - ], - "jwk": { - "kty": "RSA", - "q": "zNBNdbcN4aIBMw7YHGRr2Ype3lLckyFPozPgb11gs3bYTryE9A2to3Ik9Wu6rNF9V6pemf6j1jEGpX_z3Gx4EW9deY69-XdHch4ZqrSgEW1o2iykwwD1C4ocwZDRPrwg2IHxffoFOL5PUfsFRt5LA3W9h8UC_bN39yt4N5N11_c", - "d": "ejTRL_rY5gM7zGKczfW6dLGjrxWldwJ76ofVSQ2lUgF_3nZCli73XV4x50mY4jyuY-kUwKCjVR0nRfYj6sbaRY1FCxKVhkiWaS-FSTjlpghRKd2lxHwu_Ne6gOxdzp8lvlhcFs9nim9QSulhd6Y6jNPd8HRjbDGNsAF_DS1icTeKYhisHG04HSjn1roEO7FHgJBh5kGlxJyfS7jSYTZGkab9QjRCgfjERSX7-dClXmMCcZZFn4tX8EIrT0uD7E29X4dWlCD8wm-fcKT-rGJaMQyK81p3ewv-Fnon-GlqJ74jabQfgXlHXVFFOr75JwUt93nOH4N6Ss_l9jBqMEQ1VQ", - "e": "AQAB", - "use": "sig", - "kid": "5t-FNLBU_yFN-Vk8TUTVsZII2g40uD5grosbn4-NFPE", - "qi": "BDiiruwR4YHkHyvXQ3rNtTIf0uM9pr-zI1EDPuKh478NLsiY0MJY_0ntrBCXeto6x-dRcgZduCAiG7PHLLeN4NIpjTl1hZUg3L8z29MA3rTtvRu1DR5aNUwtjewg-HC-B9AfLa35Pnq7a4d047gcRlb_QQt83YgqDTdqkK0z0wA", - "dp": "nDVhUujW3SwYJUCFuRyY91U3reuldgd47PEMVgf4i0XDtOxdMvhc6RLPhUedkn3cXFOO96iQIAjk3ToAAbFs-gNuRXneU8FC39_HEriaJ-w-w9UMr-MNm-nl9L__SDnUQlX8zFGEI2lsNTQiK8gtmp60DHPaeKoE_jEgoWXav20", - "alg": "RS256", - "dq": "XBedfLyehUHvACJAkiOlSt-o4Japj45-3IdK90gpXwilImIp9gLgfImqjJ-wBFz92xlECEIzMPBCaNAruoUbR9unUC0axr0XZvyZ1eP5xVxItTE1tGkNxe6IF5EiRO8aZb-n8lklV-paiCYyrTbuy9N5MT8opSK5Ym4tU-_-IOk", - "n": "yPRP6Si1wj9VFjiFCvE5AmWAz47GHHRvNNe-fPo3C5lrWiOHCiBr_YshTSjio1qrLzA_4lVW6XAo0hoT57ze3Whc6Jj7FDOy9SnZyUZY07_xHKwdsHQnwP3_h2Ofl8Th51XTBNIVCqlmR4cQmRPoM7xeJEfje_6zpMIoMDqT8eoGfG5CI6YKlD2CuvN3apbvRcpUqqtu9zozy05mByH8bC-UCWSw46jvJvbuUc904csBTq3BU7-UyPZBSE6Pje6qfKX97nV58t6uI7neHW-vBgXcm72kfQ9W5hY-FByWSF3NbsTEvR_MdgNpTQaKZug_urIeQU5FkVlcwP3J0oAyZQ" - } -} \ No newline at end of file + "name": "testName", + "clientId": "testClientId", + "clientAuthType": "testAuthType", + "owners": ["testOwners"], + "jwk": { + "kty": "RSA", + "q": "zNBNdbcN4aIBMw7YHGRr2Ype3lLckyFPozPgb11gs3bYTryE9A2to3Ik9Wu6rNF9V6pemf6j1jEGpX_z3Gx4EW9deY69-XdHch4ZqrSgEW1o2iykwwD1C4ocwZDRPrwg2IHxffoFOL5PUfsFRt5LA3W9h8UC_bN39yt4N5N11_c", + "d": "ejTRL_rY5gM7zGKczfW6dLGjrxWldwJ76ofVSQ2lUgF_3nZCli73XV4x50mY4jyuY-kUwKCjVR0nRfYj6sbaRY1FCxKVhkiWaS-FSTjlpghRKd2lxHwu_Ne6gOxdzp8lvlhcFs9nim9QSulhd6Y6jNPd8HRjbDGNsAF_DS1icTeKYhisHG04HSjn1roEO7FHgJBh5kGlxJyfS7jSYTZGkab9QjRCgfjERSX7-dClXmMCcZZFn4tX8EIrT0uD7E29X4dWlCD8wm-fcKT-rGJaMQyK81p3ewv-Fnon-GlqJ74jabQfgXlHXVFFOr75JwUt93nOH4N6Ss_l9jBqMEQ1VQ", + "e": "AQAB", + "use": "sig", + "kid": "5t-FNLBU_yFN-Vk8TUTVsZII2g40uD5grosbn4-NFPE", + "qi": "BDiiruwR4YHkHyvXQ3rNtTIf0uM9pr-zI1EDPuKh478NLsiY0MJY_0ntrBCXeto6x-dRcgZduCAiG7PHLLeN4NIpjTl1hZUg3L8z29MA3rTtvRu1DR5aNUwtjewg-HC-B9AfLa35Pnq7a4d047gcRlb_QQt83YgqDTdqkK0z0wA", + "dp": "nDVhUujW3SwYJUCFuRyY91U3reuldgd47PEMVgf4i0XDtOxdMvhc6RLPhUedkn3cXFOO96iQIAjk3ToAAbFs-gNuRXneU8FC39_HEriaJ-w-w9UMr-MNm-nl9L__SDnUQlX8zFGEI2lsNTQiK8gtmp60DHPaeKoE_jEgoWXav20", + "alg": "RS256", + "dq": "XBedfLyehUHvACJAkiOlSt-o4Japj45-3IdK90gpXwilImIp9gLgfImqjJ-wBFz92xlECEIzMPBCaNAruoUbR9unUC0axr0XZvyZ1eP5xVxItTE1tGkNxe6IF5EiRO8aZb-n8lklV-paiCYyrTbuy9N5MT8opSK5Ym4tU-_-IOk", + "n": "yPRP6Si1wj9VFjiFCvE5AmWAz47GHHRvNNe-fPo3C5lrWiOHCiBr_YshTSjio1qrLzA_4lVW6XAo0hoT57ze3Whc6Jj7FDOy9SnZyUZY07_xHKwdsHQnwP3_h2Ofl8Th51XTBNIVCqlmR4cQmRPoM7xeJEfje_6zpMIoMDqT8eoGfG5CI6YKlD2CuvN3apbvRcpUqqtu9zozy05mByH8bC-UCWSw46jvJvbuUc904csBTq3BU7-UyPZBSE6Pje6qfKX97nV58t6uI7neHW-vBgXcm72kfQ9W5hY-FByWSF3NbsTEvR_MdgNpTQaKZug_urIeQU5FkVlcwP3J0oAyZQ" + } +} diff --git a/src/test/resources/well-known-uri-response.json b/src/test/resources/well-known-uri-response.json index bc597f7..48a97a1 100644 --- a/src/test/resources/well-known-uri-response.json +++ b/src/test/resources/well-known-uri-response.json @@ -1,37 +1,125 @@ { - "issuer": "https://example.com", - "authorization_endpoint": "https://example.com/as/authorization.oauth2", - "token_endpoint": "https://example.com/as/token.oauth2", - "revocation_endpoint": "https://example.com/as/revoke_token.oauth2", - "userinfo_endpoint": "https://example.com/idp/userinfo.openid", - "introspection_endpoint": "https://example.com/as/introspect.oauth2", - "jwks_uri": "https://example.com/pf/JWKS", - "registration_endpoint": "https://example.com/as/clients.oauth2", - "ping_revoked_sris_endpoint": "https://example.com/pf-ws/rest/sessionMgmt/revokedSris", - "ping_session_management_sris_endpoint": "https://example.com/pf-ws/rest/sessionMgmt/sessions", - "ping_end_session_endpoint": "https://example.com/idp/startSLO.ping", - "device_authorization_endpoint": "https://example.com/as/device_authz.oauth2", - "scopes_supported": [ "openid" ], - "claims_supported": [ "serial", "sub", "trustzone", "username" ], - "response_types_supported": [ "code", "token", "id_token", "code token", "code id_token", "token id_token", "code token id_token" ], - "response_modes_supported": [ "fragment", "query", "form_post" ], - "grant_types_supported": [ "implicit", "authorization_code", "refresh_token", "password", "client_credentials", "urn:pingidentity.com:oauth2:grant_type:validate_bearer", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer", "urn:ietf:params:oauth:grant-type:device_code", "urn:ietf:params:oauth:grant-type:token-exchange", "urn:openid:params:grant-type:ciba" ], - "subject_types_supported": [ "public", "pairwise" ], - "id_token_signing_alg_values_supported": [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ], - "token_endpoint_auth_methods_supported": [ "client_secret_basic", "client_secret_post", "private_key_jwt" ], - "token_endpoint_auth_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ], - "claim_types_supported": [ "normal" ], - "claims_parameter_supported": false, - "request_parameter_supported": true, - "request_uri_parameter_supported": false, - "request_object_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ], - "id_token_encryption_alg_values_supported": [ "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "RSA-OAEP" ], - "id_token_encryption_enc_values_supported": [ "A128CBC-HS256", "A192CBC-HS384", "A256CBC-HS512", "A128GCM", "A192GCM", "A256GCM" ], - "pushed_authorization_request_endpoint": "https://example.com/as/par.oauth2", - "require_pushed_authorization_requests": false, - "backchannel_authentication_endpoint": "https://example.com/as/bc-auth.ciba", - "backchannel_token_delivery_modes_supported": [ "poll", "ping" ], - "backchannel_authentication_request_signing_alg_values_supported": [ "RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "PS256", "PS384", "PS512" ], - "backchannel_user_code_parameter_supported": false, - "code_challenge_methods_supported": [ "plain", "S256" ] + "issuer": "https://example.com", + "authorization_endpoint": "https://example.com/as/authorization.oauth2", + "token_endpoint": "https://example.com/as/token.oauth2", + "revocation_endpoint": "https://example.com/as/revoke_token.oauth2", + "userinfo_endpoint": "https://example.com/idp/userinfo.openid", + "introspection_endpoint": "https://example.com/as/introspect.oauth2", + "jwks_uri": "https://example.com/pf/JWKS", + "registration_endpoint": "https://example.com/as/clients.oauth2", + "ping_revoked_sris_endpoint": "https://example.com/pf-ws/rest/sessionMgmt/revokedSris", + "ping_session_management_sris_endpoint": "https://example.com/pf-ws/rest/sessionMgmt/sessions", + "ping_end_session_endpoint": "https://example.com/idp/startSLO.ping", + "device_authorization_endpoint": "https://example.com/as/device_authz.oauth2", + "scopes_supported": ["openid"], + "claims_supported": ["serial", "sub", "trustzone", "username"], + "response_types_supported": [ + "code", + "token", + "id_token", + "code token", + "code id_token", + "token id_token", + "code token id_token" + ], + "response_modes_supported": ["fragment", "query", "form_post"], + "grant_types_supported": [ + "implicit", + "authorization_code", + "refresh_token", + "password", + "client_credentials", + "urn:pingidentity.com:oauth2:grant_type:validate_bearer", + "urn:ietf:params:oauth:grant-type:jwt-bearer", + "urn:ietf:params:oauth:grant-type:saml2-bearer", + "urn:ietf:params:oauth:grant-type:device_code", + "urn:ietf:params:oauth:grant-type:token-exchange", + "urn:openid:params:grant-type:ciba" + ], + "subject_types_supported": ["public", "pairwise"], + "id_token_signing_alg_values_supported": [ + "none", + "HS256", + "HS384", + "HS512", + "RS256", + "RS384", + "RS512", + "ES256", + "ES384", + "ES512", + "PS256", + "PS384", + "PS512" + ], + "token_endpoint_auth_methods_supported": [ + "client_secret_basic", + "client_secret_post", + "private_key_jwt" + ], + "token_endpoint_auth_signing_alg_values_supported": [ + "RS256", + "RS384", + "RS512", + "ES256", + "ES384", + "ES512", + "PS256", + "PS384", + "PS512" + ], + "claim_types_supported": ["normal"], + "claims_parameter_supported": false, + "request_parameter_supported": true, + "request_uri_parameter_supported": false, + "request_object_signing_alg_values_supported": [ + "RS256", + "RS384", + "RS512", + "ES256", + "ES384", + "ES512", + "PS256", + "PS384", + "PS512" + ], + "id_token_encryption_alg_values_supported": [ + "dir", + "A128KW", + "A192KW", + "A256KW", + "A128GCMKW", + "A192GCMKW", + "A256GCMKW", + "ECDH-ES", + "ECDH-ES+A128KW", + "ECDH-ES+A192KW", + "ECDH-ES+A256KW", + "RSA-OAEP" + ], + "id_token_encryption_enc_values_supported": [ + "A128CBC-HS256", + "A192CBC-HS384", + "A256CBC-HS512", + "A128GCM", + "A192GCM", + "A256GCM" + ], + "pushed_authorization_request_endpoint": "https://example.com/as/par.oauth2", + "require_pushed_authorization_requests": false, + "backchannel_authentication_endpoint": "https://example.com/as/bc-auth.ciba", + "backchannel_token_delivery_modes_supported": ["poll", "ping"], + "backchannel_authentication_request_signing_alg_values_supported": [ + "RS256", + "RS384", + "RS512", + "ES256", + "ES384", + "ES512", + "PS256", + "PS384", + "PS512" + ], + "backchannel_user_code_parameter_supported": false, + "code_challenge_methods_supported": ["plain", "S256"] }