On 10/03/2014 12:22 PM, Chris Karlof wrote: > > On Mar 9, 2014, at 2:49 PM, Ryan Kelly wrote: > >> On 8/03/2014 5:44 AM, Chris Karlof wrote: >>> Is the enforcement of "allowed_issuers" being tested in the token server >>> anywhere? >> >> I confirmed it with manual testing against prod - stage with accept >> assertions issued by mockmyid.com, prod refuses them with the >> appropriate 401 error. >> > > Is there a test in the token server test suite that checks that > "allowed_issues" is properly enforced (assuming it's been configured > properly, of course)? > > FWIW, I couldn't find one.
There is not, yet... Ryan _______________________________________________ Sync-dev mailing list Sync-dev@mozilla.org https://mail.mozilla.org/listinfo/sync-dev