test(ci): cover the person route, per-issuer audiences and exact trust - #247

Closed

alukach wants to merge 7 commits into

feat/platform-trustfrom

test/sts-ci-gaps

Commits on Oct 1, 2026

fix(sts): trim a platform token before reading it

alukach
and
claude
committed
26d74d8
perf(sts): cache a refused trust under the trust answer's own key

alukach
and
claude
committed
5ae932d
fix(sts): carry the request id in every exchange refusal

alukach
and
claude
committed
e06a993
fix(config): never let PLATFORM_ISSUERS claim the person issuer

alukach
and
claude
committed
56cb2ba
fix(sts): limit the AUTH_AUDIENCE 501 to the person route

alukach
and
claude
committed
5813cc3
test(ci): cover the person route and per-issuer audiences

alukach
and
claude
committed
93e78a7
ci(staging): mint the smoke-test token only with a trust account

alukach
and
claude
committed
39cc0e0