mirror of
https://github.com/saltbo/zpan.git
synced 2026-08-29 00:01:42 +08:00
realmroot[bot]
10e16d14a2
* fix(oauth): make token revocation idempotent * fix(store): complete agent capacity purchase workflow * fix(build): refresh patched dependency lock hash * fix(oauth): hide inactive token state on revoke --------- Co-authored-by: saltbo <saltbo@foxmail.com>
9 lines
415 B
Gherkin
9 lines
415 B
Gherkin
Feature: OAuth server
|
|
ZPan exposes OAuth endpoints for delegated applications and agents.
|
|
|
|
@oauth-server/idempotent-token-revocation @api
|
|
Scenario: Revoking an inactive token is idempotent
|
|
Given an authenticated OAuth client with an expired, revoked, or unknown token
|
|
When the client submits the token to the revocation endpoint
|
|
Then the endpoint returns success without revealing the token state
|