Skip to content

🧪 Auto-PR: Merge develop → test - #1013

Merged
proxy-smart-releaser[bot] merged 3 commits into
testfrom
develop
Aug 13, 2026
Merged

🧪 Auto-PR: Merge develop → test#1013
proxy-smart-releaser[bot] merged 3 commits into
testfrom
develop

Conversation

@proxy-smart-releaser

Copy link
Copy Markdown
Contributor

Automated Pull Request 🤖

Commits ahead of test: 2
Commits behind test: 0
TODOs remaining in codebase: 3

quotentiroler and others added 3 commits August 13, 2026 17:46
…_credentials

Every Keycloak admin call the backend makes authenticates with
grant_type=client_credentials, and Keycloak answers that grant with no
refresh_token. 26.7.0 and 26.7.1 call setRefreshToken(refreshToken)
unconditionally in auth() and decode the result, so decodeToken(undefined) runs
`token.split(".")` and throws

  undefined is not an object (evaluating 'token.split')

admin.auth() therefore rejected on EVERY call since the dep sweep in c481d7d:
CORS origin refresh, client-config lookups, every admin route. The SMART
compliance suite has failed on every run since that commit landed — the proxy
could not read inferno-test-client's registered redirect URIs, so /auth/authorize
answered 400 for a redirect_uri that was registered all along.

c481d7d diffed the published .d.ts files and cleared the bump on that basis.
The break is in runtime behaviour with no type change, and every one of our tests
mocks this client, so neither the type diff nor a green suite could see it. That
commit also recorded the deliberate server/client skew (server is 26.6.4); this
restores the lockstep it wanted.

26.7.1 is the newest published version, so there is no forward fix to take.

Adds a contract test that drives the real library against a token endpoint
answering the way Keycloak does, so a future bump reintroducing this fails in the
suite instead of in CI four commits later.
@proxy-smart-releaser
proxy-smart-releaser Bot merged commit ad7606b into test Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant