Skip to content

Client elevation#952

Merged
jmattheis merged 16 commits intomasterfrom
oidc-next
Apr 26, 2026
Merged

Client elevation#952
jmattheis merged 16 commits intomasterfrom
oidc-next

Conversation

@jmattheis
Copy link
Copy Markdown
Member

step-up.webm

Fixes #944

@jmattheis jmattheis requested a review from a team as a code owner April 18, 2026 11:03
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 18, 2026

Codecov Report

❌ Patch coverage is 66.66667% with 56 lines in your changes missing coverage. Please review.
✅ Project coverage is 75.01%. Comparing base (6e588f3) to head (ef36e75).
⚠️ Report is 17 commits behind head on master.

Files with missing lines Patch % Lines
api/oidc.go 7.14% 39 Missing ⚠️
api/client.go 61.90% 5 Missing and 3 partials ⚠️
api/user.go 60.00% 3 Missing and 1 partial ⚠️
auth/authentication.go 92.10% 1 Missing and 2 partials ⚠️
api/session.go 92.30% 1 Missing ⚠️
router/router.go 85.71% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master     #952      +/-   ##
==========================================
- Coverage   75.69%   75.01%   -0.69%     
==========================================
  Files          61       61              
  Lines        2786     2886     +100     
==========================================
+ Hits         2109     2165      +56     
- Misses        523      566      +43     
- Partials      154      155       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@eternal-flame-AD
Copy link
Copy Markdown
Member

I am traveling rn, will take a look probably Tuesday!

Comment thread ui/src/client/ClientStore.ts Outdated
Comment thread auth/authentication.go
Comment thread auth/authentication.go Outdated
Comment thread router/router.go Outdated
clientElevated := g.Group("")
{
clientElevated.Use(authentication.RequireElevatedClient)
clientElevated.POST("/client:elevate", clientHandler.ElevateClient)
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe /client/:id/elevate is more REST-y?

Copy link
Copy Markdown
Member Author

@jmattheis jmattheis Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've got this from here: https://google.aip.dev/136 though I'm not sure how common this actually is. I don't really have a preference, do you have one?

PS: Thanks for the review!

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's okay, I prefer using REST as that matches as the current "vibe" of designs, but I'm not going to insist on it.

Copy link
Copy Markdown
Member Author

@jmattheis jmattheis Apr 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've changed this to /client/:id/elevate, you're right, this is more consistent with other apis e.g. /application/:id/image.

Comment thread api/user.go Outdated
Comment thread ui/src/client/Clients.tsx Outdated
@jmattheis jmattheis mentioned this pull request Apr 26, 2026
8 tasks
@jmattheis jmattheis merged commit 9e5a6b5 into master Apr 26, 2026
2 of 4 checks passed
@jmattheis jmattheis deleted the oidc-next branch April 26, 2026 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

Step-Up auth

2 participants