Directories
¶
| Path | Synopsis |
|---|---|
|
Package corpusgen produces deterministic edge-case seed values from neutral schema/auth constraints.
|
Package corpusgen produces deterministic edge-case seed values from neutral schema/auth constraints. |
|
Package jwtalg is the canonical JWS algorithm-confusion guard shared by the OIDC/JWKS verification paths in api/oidc.go and pkg/htpx/oidc.go, which previously each carried a byte-identical private copy of the asymmetric allowlist plus the unverified-header parse (QG-060/QG-081).
|
Package jwtalg is the canonical JWS algorithm-confusion guard shared by the OIDC/JWKS verification paths in api/oidc.go and pkg/htpx/oidc.go, which previously each carried a byte-identical private copy of the asymmetric allowlist plus the unverified-header parse (QG-060/QG-081). |
|
Package webauthntestca materializes a synthetic, self-signed WebAuthn attestation trust-anchor certificate for the repo's fixture configs (configs/webauthn-passkey.json, configs/fedramp-baseline.json, configs/webauthn-and-webhook-combo.json, configs/webauthn-passkey-hardened.json), each of which points security.webauthn.attestation_roots_path at configs/testdata/webauthn-attestation-roots.pem (R10-2 step 4; APPSEC-14 requires the pairing whenever aaguid_allow_list is non-empty; webauthnx.NewServer fails closed on a nil pool).
|
Package webauthntestca materializes a synthetic, self-signed WebAuthn attestation trust-anchor certificate for the repo's fixture configs (configs/webauthn-passkey.json, configs/fedramp-baseline.json, configs/webauthn-and-webhook-combo.json, configs/webauthn-passkey-hardened.json), each of which points security.webauthn.attestation_roots_path at configs/testdata/webauthn-attestation-roots.pem (R10-2 step 4; APPSEC-14 requires the pairing whenever aaguid_allow_list is non-empty; webauthnx.NewServer fails closed on a nil pool). |
|
cmd/gen
command
Command gen is a thin CLI wrapper around webauthntestca.Ensure, invoked from tests/boot-all-configs.sh and the Makefile so non-Go entry points (bash, make) can materialize the same gitignored synthetic WebAuthn attestation-roots fixture that cmd/apic's boot-smoke test generates for itself.
|
Command gen is a thin CLI wrapper around webauthntestca.Ensure, invoked from tests/boot-all-configs.sh and the Makefile so non-Go entry points (bash, make) can materialize the same gitignored synthetic WebAuthn attestation-roots fixture that cmd/apic's boot-smoke test generates for itself. |
Click to show internal directories.
Click to hide internal directories.