coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reconcile recovery by support reference and bound provider lookup
All checks were successful
Authentication acceptance / acceptance (push) Successful in 1m4s
Details
Authentication acceptance / provider-contract (push) Successful in 14s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-13 21:11:03 +02:00
parent cb51584f58
commit d15f4dde0b
4 changed files with 43 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/provider-onboarding-contract.py
View file

@ -124,6 +124,8 @@ def run():
for name,token in [('tenant_admin',signed(roles=['tenant-admin'])),('wrong_audience',signed(aud='other')),('stale_mfa',signed(assurance=dict(level='aal2',mfa=True,at=now-301))),('unsigned','invalid')]:
status,_=operation(preview_body,token)
check('service_denies_'+name,status==403 and store.snapshot('alice',serial)['active'])
status,_=operation(dict(preview_body,user='missing-fixture-user'))
check('service_unknown_user_not_realm_wide',status==409 and store.snapshot('alice',serial)['active'])
status,preview=operation(preview_body)
check('service_preview_owned_factor',status==200 and len(preview['factors'])==1)
confirmation=preview['factors'][0]['confirmation']
@ -134,6 +136,8 @@ def run():
check('service_audited_recovery',status==200 and receipt['changes_applied'] and store.receipt('fixture-browser-recovery')['complete'])
status,receipt=operation(apply_body)
check('service_safe_retry',status==200 and receipt['replayed'])
status,receipt=operation(dict(action='status',reference='fixture-browser-recovery'))
check('service_support_reference_readback',status==200 and receipt['status']=='recovered')
phase='replacement_possession'
detail=enroll();serial=detail['serial']
seed=urllib.parse.parse_qs(urllib.parse.urlsplit(detail['googleurl']['value']).query)['secret'][0]