Post #1256185
2026-04-17 12:27 UTC
As always, as I start the work for the verifier in the auth module, the coverage is quite low:
https://coveralls.io/github/go-ap/auth
Replies (1)
-
@mariusor@metalhead.club 2026-04-27 15:48
The work is done, huzzah!! 🥳 With the coverage increased to +85% and with a couple of pending improvements to the common-fate/httpsig library. Until those land, I'm using a forked version. The auth module has transformed during this work to only have logic related to extracting authorized actors from either OAuth2 and HTTP-Signature headers (both the widely used draft and the new RFC9421 version). This makes me confident that the convergence of the library's modules that I'm planning for v1 is actually a good idea.