On 10/03/2014 12:22 PM, Chris Karlof wrote:
> 
> On Mar 9, 2014, at 2:49 PM, Ryan Kelly wrote:
> 
>> On 8/03/2014 5:44 AM, Chris Karlof wrote:
>>> Is the enforcement of "allowed_issuers" being tested in the token server 
>>> anywhere?
>>
>> I confirmed it with manual testing against prod - stage with accept
>> assertions issued by mockmyid.com, prod refuses them with the
>> appropriate 401 error.
>>
> 
> Is there a test in the token server test suite that checks that 
> "allowed_issues" is properly enforced (assuming it's been configured 
> properly, of course)?
> 
> FWIW, I couldn't find one.

There is not, yet...

  Ryan
_______________________________________________
Sync-dev mailing list
Sync-dev@mozilla.org
https://mail.mozilla.org/listinfo/sync-dev

Reply via email to