Require fresh KeyCape authentication for decision review sign-in

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
tegwick 2026-09-16 01:35:02 +02:00
parent c70d63abf9
commit 3f1c9ecd8a
6 changed files with 23 additions and 1 deletions

View file

@ -101,6 +101,8 @@ def test_pkce_nonce_scope_and_imported_human_session(login):
assert session.access_token not in repr(session)
assert login[1].params["scope"] == "openid approval:read approval:approve"
assert login[1].params["code_challenge_method"] == "S256"
assert login[1].params["prompt"] == "login"
assert login[1].params["max_age"] == "0"
assert login[1].params["nonce"] != login[1].params["state"]