From 43862132334b56fd9624dfbdb955f7c73361730a Mon Sep 17 00:00:00 2001 From: unknown Date: Sun, 18 Oct 2026 15:32:12 +0530 Subject: [PATCH] docs: use ada@example.com instead of a real email README's claims table and the OIDC exchange test used a real person's email as the example subject. Fixes #4 Co-Authored-By: Claude Opus 5.5 --- README.md | 2 +- cmd/priompt-auth/main_test.go | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index a86a7d7..6690b63 100644 --- a/README.md +++ b/README.md @@ -124,7 +124,7 @@ and the core server's verifier — the two halves cannot drift: | Claim | Example | Meaning | | --- | --- | --- | -| `sub` | `ci-bot`, `sujal@acme.com` | who this token was issued to (lands in audit logs and commit authorship) | +| `sub` | `ci-bot`, `ada@example.com` | who this token was issued to (lands in audit logs and commit authorship) | | `org` | `acme` (`""` = admin) | org scope — same rule as static tokens: only `priompt://acme/…` | | `rw` | `true` | may publish/branch/merge/rollback; read-only otherwise | | `exp` / `iat` | unix seconds | always set; default TTL 15 minutes (`-ttl`) | diff --git a/cmd/priompt-auth/main_test.go b/cmd/priompt-auth/main_test.go index 68b6015..2578bd2 100644 --- a/cmd/priompt-auth/main_test.go +++ b/cmd/priompt-auth/main_test.go @@ -164,11 +164,11 @@ func TestOIDCExchange(t *testing.T) { exp := time.Now().Add(time.Hour) code, tok := getToken(t, srv, url.Values{ - "grant_type": {"oidc"}, "id_token": {f.idToken(t, f.srv.URL, "sujal@acme.com", []string{"acme-authors"}, exp)}}) + "grant_type": {"oidc"}, "id_token": {f.idToken(t, f.srv.URL, "ada@example.com", []string{"acme-authors"}, exp)}}) if code != 200 { t.Fatalf("valid ID token must exchange, got %d", code) } - if c := decodeClaims(t, tok); c.Sub != "sujal@acme.com" || c.Org != "acme" || !c.RW { + if c := decodeClaims(t, tok); c.Sub != "ada@example.com" || c.Org != "acme" || !c.RW { t.Errorf("wrong mapped claims: %+v", c) }