giles
db885e15bc
Some checks failed
Test, Build, and Deploy / test-build-deploy (push) Failing after 57s
delegation.sx makes the loop's central rule concrete: check() introspects
the token first — inactive → {error, unauthenticated} (401), acl never
consulted — and only an authenticated subject's request is delegated to
acl, which returns permit/deny ({error, forbidden} = 403). 401 strictly
precedes 403. acl-on-sx (Datalog) is a different SX guest wired at the
integration layer, so the decider here is a labelled stub (permits when
Action in Scope); swap the pid and the boundary is unchanged. New
tests/delegation.sx. 185/185 — extensions backlog clear.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
24 lines
1006 B
JSON
24 lines
1006 B
JSON
{
|
|
"language": "identity",
|
|
"total_pass": 185,
|
|
"total": 185,
|
|
"suites": [
|
|
{"name":"session","pass":11,"total":11,"status":"ok"},
|
|
{"name":"token","pass":24,"total":24,"status":"ok"},
|
|
{"name":"registry","pass":9,"total":9,"status":"ok"},
|
|
{"name":"api","pass":10,"total":10,"status":"ok"},
|
|
{"name":"oauth","pass":17,"total":17,"status":"ok"},
|
|
{"name":"sso","pass":10,"total":10,"status":"ok"},
|
|
{"name":"membership","pass":17,"total":17,"status":"ok"},
|
|
{"name":"cache","pass":9,"total":9,"status":"ok"},
|
|
{"name":"audit","pass":11,"total":11,"status":"ok"},
|
|
{"name":"federation","pass":12,"total":12,"status":"ok"},
|
|
{"name":"expiry","pass":8,"total":8,"status":"ok"},
|
|
{"name":"clients","pass":11,"total":11,"status":"ok"},
|
|
{"name":"grants","pass":9,"total":9,"status":"ok"},
|
|
{"name":"device","pass":10,"total":10,"status":"ok"},
|
|
{"name":"facade","pass":9,"total":9,"status":"ok"},
|
|
{"name":"delegation","pass":8,"total":8,"status":"ok"}
|
|
]
|
|
}
|