Add tests for toolbar OAuth primitives and endpoints
Open
@fercgomes is already working on this.
Since Feb 12, 2026.
enhancement
feature/toolbar
- Dominant language
- Python
- Stars
- 39.9k
- Forks
- 3.4k
- Avg merge
- 6h 51m
- Merged PRs (30d)
- 232
Description
Add coverage for core security guarantees and endpoint contracts introduced in PR1.
Scope:
- Service tests for state expiry, tamper detection, replay prevention
- Endpoint tests for start/exchange success + failure paths
- Team/user mismatch and unauthorized domain tests
- OAuth app bootstrap behavior tests (create/reuse/redirect URI)
Acceptance criteria:
- New tests cover all critical negative paths
- Existing toolbar auth tests remain green
- No regressions in current auth behavior
Out of scope:
- No E2E toolbar UI tests yet
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.