On Mar 9, 2014, at 2:49 PM, Ryan Kelly wrote: > On 8/03/2014 5:44 AM, Chris Karlof wrote: >> Is the enforcement of "allowed_issuers" being tested in the token server >> anywhere? > > I confirmed it with manual testing against prod - stage with accept > assertions issued by mockmyid.com, prod refuses them with the > appropriate 401 error. >
Is there a test in the token server test suite that checks that "allowed_issues" is properly enforced (assuming it's been configured properly, of course)? FWIW, I couldn't find one. -chris _______________________________________________ Sync-dev mailing list [email protected] https://mail.mozilla.org/listinfo/sync-dev
