This is an automated email from the ASF dual-hosted git repository.

github-actions[bot] pushed a commit to branch test-catalog
in repository https://gitbox.apache.org/repos/asf/kafka.git


The following commit(s) were added to refs/heads/test-catalog by this push:
     new 66fcba2457a Update test catalog data for GHA workflow run 27966109503
66fcba2457a is described below

commit 66fcba2457ad0db1ad5ba7e78751cd726f8458ed
Author: github-actions[bot] 
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Mon Jun 22 18:48:46 2026 +0000

    Update test catalog data for GHA workflow run 27966109503
    
    Commit: 
https://github.com/apache/kafka/commit/9c7fad339731199da395d90690fc62efae69615b
    GitHub Run: https://github.com/apache/kafka/actions/runs/27966109503
---
 test-catalog/clients/tests.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/test-catalog/clients/tests.yaml b/test-catalog/clients/tests.yaml
index 800c4907127..55ac9083cd3 100644
--- a/test-catalog/clients/tests.yaml
+++ b/test-catalog/clients/tests.yaml
@@ -4853,15 +4853,24 @@ 
org.apache.kafka.common.security.kerberos.KerberosNameTest:
 org.apache.kafka.common.security.kerberos.KerberosRuleTest:
 - testReplaceParameters
 org.apache.kafka.common.security.oauthbearer.BrokerJwtValidatorTest:
+- testAllowUnverifiedAudience
+- testAllowUnverifiedIssuer
+- testAllowUnverifiedIssuerAndAudience
+- testConfigureFailsWhenExpectedAudienceUnset
+- testConfigureFailsWhenExpectedIssuerUnset
+- testConfigureFailsWhenNeitherExpectedSet
 - testEcdsaEncryptionAlgorithm
 - testEmptySections
 - testEmptyString
+- testExpectedIssuerSet
 - testInvalidEncryptionAlgorithm
 - testMissingHeader
 - testMissingPayload
 - testMissingSignature
 - testMissingSubShouldBeValid
 - testNull
+- testRejectMissingIssuerClaimWhenExpectedIssuerSet
+- testRejectWrongAudienceWhenExpectedAudienceSet
 - testRsaEncryptionAlgorithm
 - testWhitespace
 org.apache.kafka.common.security.oauthbearer.ClaimValidationUtilsTest:
@@ -4929,6 +4938,7 @@ 
org.apache.kafka.common.security.oauthbearer.DefaultJwtValidatorTest:
 - testConfigureWithJwksUrl
 - testConfigureWithVerificationKeyResolver
 - testConfigureWithoutVerificationKeyResolver
+- testRejectsAttackerIssuerViaDefaultJwtValidatorWithJwksUrl
 org.apache.kafka.common.security.oauthbearer.JwtBearerJwtRetrieverTest:
 - testConfigure
 - testConfigureWithInvalidPassphrase
@@ -4964,6 +4974,8 @@ 
org.apache.kafka.common.security.oauthbearer.OAuthBearerValidatorCallbackHandler
 - testBasic
 - testConfigureAcceptsCustomValidatorClass
 - testFailsFastWhenJwksUrlAbsent
+- testFailsToStartWhenExpectedAudienceMissingWithJwksUrl
+- testFailsToStartWhenExpectedIssuerMissingWithJwksUrl
 - testHandlerCloseDoesNotThrowException
 - testHandlerConfigureThrowsException
 - testInvalidAccessToken

Reply via email to