test(jwt): pin the claim checks and every stored format; fix the rotation and blind-index guides - #481

Merged

Jaro-c merged 3 commits into

fix/tokens-review-round-2

Sep 26, 2026

Commits on Sep 26, 2026

docs: conditional refresh-hash replace in secure-login, the blind index read path, and the credential binding
Jaro-c
committed
bfcb12c
test(jwt): pin the claim checks, the leeway, the issuance cap, the zero-value guard, and the refresh-hash format; give both fuzz targets oracles
Jaro-c
committed
b0811ef
test(apikey,credential,field): known answers for every stored format, and the seeds that reach ParseID's rules
Jaro-c
committed
5f4ac4a