chore(xtest): DPoP nonce-challenge test coverage and CLI/CI hardening#529

Open

dmihalcik-virtru wants to merge 23 commits into

mainfrom

fix-dpop-nonce-challenge

Commits on Jun 26, 2026

ci: bump platform action SHA and enable dpop-nonce-challenge

dmihalcik-virtru
and
claude
committed
fix(js-shim): wire CLIENTID, CLIENTSECRET, and DPoP into cli.sh

dmihalcik-virtru
and
claude
committed
fix(ci): pass OTDFCTL_HEADS to all pytest steps so otdfctl.sh uses dist binary

dmihalcik-virtru
and
claude
committed
ci: bump platform action SHA to pick up DPoP htu fix

dmihalcik-virtru
and
claude
committed
ci: bump platform action SHA to pick up strict_htu feature flag

dmihalcik-virtru
and
claude
committed
feat(java-sdk): delegate dpop_nonce_challenge detection to binary
dmihalcik-virtru
committed
fix(ci): correct SHA pin for platform action (24d7101c094b)
dmihalcik-virtru
committed
fix(java-cli): enable --verbose when available for silent failure diagnosis
dmihalcik-virtru
committed
fix(java-cli): check root help for --verbose (it is ScopeType.INHERIT on the parent command)
dmihalcik-virtru
committed
fix(ci): update platform action SHA pins to 70cb173a (fix DPoP htm validation)
dmihalcik-virtru
committed
Cache java cli.sh help probes to cut JVM startup overhead
dmihalcik-virtru
committed
Address PR review: atomic cache write, [[ ]] tests, redact auth secret
dmihalcik-virtru
committed
fix(ci): remove duplicate OTDFCTL_HEADS env key in xtest.yml
dmihalcik-virtru
committed
ci(dpop): enforce require_nonce on additional KAS instances
dmihalcik-virtru
committed
ci(dpop): repin platform test actions to 4a19b297; make bearer test nonce-agnostic
dmihalcik-virtru
committed
ci(dpop): repin platform test actions to 8ccc608d (enforce now opt-in)
dmihalcik-virtru
committed
test(dpop): entitle opentdf-dpop client in shared subject condition set (DSPX-3397)

dmihalcik
authored and
dmihalcik-virtru
committed

Commits on Jun 30, 2026

chore: repin platform actions to main (0612ea89)
dmihalcik-virtru
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(xtest): DPoP nonce-challenge test coverage and CLI/CI hardening#529

chore(xtest): DPoP nonce-challenge test coverage and CLI/CI hardening#529
dmihalcik-virtru wants to merge 23 commits into
mainfrom
fix-dpop-nonce-challenge

Commits on Jun 26, 2026

ci: bump platform action SHA and enable dpop-nonce-challenge

fix(js-shim): wire CLIENTID, CLIENTSECRET, and DPoP into cli.sh

fix(ci): pass OTDFCTL_HEADS to all pytest steps so otdfctl.sh uses dist binary

ci: bump platform action SHA to pick up DPoP htu fix

ci: bump platform action SHA to pick up strict_htu feature flag

feat(java-sdk): delegate dpop_nonce_challenge detection to binary

fix(ci): correct SHA pin for platform action (24d7101c094b)

fix(java-cli): enable --verbose when available for silent failure diagnosis

fix(java-cli): check root help for --verbose (it is ScopeType.INHERIT on the parent command)

fix(ci): update platform action SHA pins to 70cb173a (fix DPoP htm validation)

Cache java cli.sh help probes to cut JVM startup overhead

Address PR review: atomic cache write, [[ ]] tests, redact auth secret

fix(ci): remove duplicate OTDFCTL_HEADS env key in xtest.yml

ci(dpop): enforce require_nonce on additional KAS instances

ci(dpop): repin platform test actions to 4a19b297; make bearer test nonce-agnostic

ci(dpop): repin platform test actions to 8ccc608d (enforce now opt-in)

test(dpop): entitle opentdf-dpop client in shared subject condition set (DSPX-3397)

Commits on Jun 30, 2026

chore: repin platform actions to main (0612ea89)

Commits on Jul 1, 2026

xtest: add dpop-challenge boolean input, default false

xtest: fix dpop-challenge empty string on PR trigger

style(js/cli): use [[ ]] for all conditionals (SonarCloud SC2292)

style(cli): clear SonarCloud smells in js/java shims

Merge branch 'main' into fix-dpop-nonce-challenge