From 8be9fc37ff15c1d13fde605648552a8d8e88b9fa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 10 Dec 2025 04:02:01 +0000 Subject: [PATCH 1/2] build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.17.0 Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.14.1 to 3.17.0. - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](https://github.com/coreos/go-oidc/compare/v3.14.1...v3.17.0) --- updated-dependencies: - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.17.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 08770b50..f0db1921 100644 --- a/go.mod +++ b/go.mod @@ -9,7 +9,7 @@ require ( github.com/Masterminds/semver v1.5.0 github.com/Masterminds/sprig/v3 v3.3.0 github.com/beevik/etree v1.6.0 - github.com/coreos/go-oidc/v3 v3.14.1 + github.com/coreos/go-oidc/v3 v3.17.0 github.com/dexidp/dex/api/v2 v2.3.0 github.com/fsnotify/fsnotify v1.9.0 github.com/ghodss/yaml v1.0.0 diff --git a/go.sum b/go.sum index 29c01de7..d587a60c 100644 --- a/go.sum +++ b/go.sum @@ -40,8 +40,8 @@ github.com/bmatcuk/doublestar v1.3.4 h1:gPypJ5xD31uhX6Tf54sDPUOBXTqKH4c9aPY66CyQ github.com/bmatcuk/doublestar v1.3.4/go.mod h1:wiQtGV+rzVYxB7WIlirSN++5HPtPlXEo9MEoZQC/PmE= github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs= github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= -github.com/coreos/go-oidc/v3 v3.14.1 h1:9ePWwfdwC4QKRlCXsJGou56adA/owXczOzwKdOumLqk= -github.com/coreos/go-oidc/v3 v3.14.1/go.mod h1:HaZ3szPaZ0e4r6ebqvsLWlk2Tn+aejfmrfah6hnSYEU= +github.com/coreos/go-oidc/v3 v3.17.0 h1:hWBGaQfbi0iVviX4ibC7bk8OKT5qNr4klBaCHVNvehc= +github.com/coreos/go-oidc/v3 v3.17.0/go.mod h1:wqPbKFrVnE90vty060SB40FCJ8fTHTxSwyXJqZH+sI8= github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= From bce74e7171135c63a5afbd18c202a7d6a18650fc Mon Sep 17 00:00:00 2001 From: Mark Sagi-Kazar Date: Tue, 13 Jan 2026 14:34:24 +0100 Subject: [PATCH 2/2] fix: failing go-oidc test after 3.15 Signed-off-by: Mark Sagi-Kazar --- server/introspectionhandler_test.go | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/server/introspectionhandler_test.go b/server/introspectionhandler_test.go index 6f18d056..61ff3cf2 100644 --- a/server/introspectionhandler_test.go +++ b/server/introspectionhandler_test.go @@ -136,6 +136,7 @@ func getIntrospectionValue(issuerURL url.URL, issuedAt time.Time, expiry time.Ti func TestGetTokenFromRequestSuccess(t *testing.T) { t0 := time.Now() + ctx := t.Context() now := func() time.Time { return t0 } // Setup a dex server. @@ -145,6 +146,15 @@ func TestGetTokenFromRequestSuccess(t *testing.T) { }) defer httpServer.Close() + mockTestStorage(t, s.storage) + + // Generate a valid RS256-signed access token + accessToken, _, err := s.newIDToken(ctx, "test", storage.Claims{ + UserID: "1", + Username: "jane", + }, []string{"openid"}, "nonce", "", "", "test") + require.NoError(t, err) + tests := []struct { testName string expectedToken string @@ -153,7 +163,7 @@ func TestGetTokenFromRequestSuccess(t *testing.T) { // Access Token { testName: "Access Token", - expectedToken: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c", + expectedToken: accessToken, expectedTokenType: AccessToken, }, // Refresh Token