AJ ONeal 95cf5941c4
test(jwt): assert scope array is invalid (issuer []string bug trap)
SpaceDelimited must unmarshal from a space-delimited string per RFC 6749
§3.3, not a JSON array. If a token arrives with "scope":[] the issuer
has a bug (e.g. using []string instead of SpaceDelimited in its claims
struct). This test documents that expectation and will catch any attempt
to silently accept the invalid form.
2026-03-26 17:02:21 -06:00
..
2026-03-03 00:01:15 -07:00