Skip to content

Fix machine authentication fixtures in CI tests - #15

Merged
jmgasper merged 2 commits into
developfrom
fix/machine-token-ci
Nov 2, 2026
Merged

jmgasper merged 2 commits into
developfrom
fix/machine-token-ci

Conversation

@jmgasper

@jmgasper jmgasper commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Four integration tests failed with unexpected 401 responses because their machine tokens used HS256, while the shared authenticator requires audience-bound RS256 machine credentials. Generate RSA-signed machine tokens with the configured API audience and mock JWKS key discovery while retaining real signature verification.

Also align the machine actor unit-test fixture with the verifier-provided isMachine flag and assert that gty alone does not establish machine identity. This makes the fix independently applicable to develop.

Validation on Node 26.8.1 and disposable PostgreSQL 17: Prisma validation, lint, build, typecheck, migrations, all 68 unit tests, and all 26 integration tests passed.

Addresses the CI failures observed in #14; contains only the two test-file fixes.

@jmgasper
jmgasper merged commit e929741 into develop Nov 2, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant