GayathriSrividya commented on PR #68499:
URL: https://github.com/apache/airflow/pull/68499#issuecomment-5743089850

   > Thanks for working on this @GayathriSrividya, this needs some more work.
   
    
   
   Thanks for the reviews — I addressed the points as follows.
   
   - The regression test now reproduces the actual TOCTOU window by advancing 
time after JWTBearer has already accepted the token and before the middleware 
refresh check runs.
   - The middleware no longer calls `avalidated_claims` a second time; it 
reuses the already-validated claims cached on `request.scope`.
   - I also moved the inline imports to the module level in the test file to 
match project style.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to