fix: read the issuer from signed content, and let it be pinned - #41

Merged

shreemaan-abhishek merged 6 commits into

mainfrom

fix/issuer-from-signed-assertion

Aug 20, 2026

Commits on Aug 17, 2026

fix: read the issuer from the assertion the signature covers
shreemaan-abhishek
committed
0cbf079
feat: pin the issuers accepted on a login response
shreemaan-abhishek
committed
92c511c

Commits on Aug 18, 2026

fix: check the issuer of every assertion the readers consume
shreemaan-abhishek
committed
041bb56
fix: fail closed when the issuers cannot be read
shreemaan-abhishek
committed
7bbea1e

Commits on Aug 19, 2026

fix: refuse a message the verified signature does not cover
shreemaan-abhishek
committed
3939263

Commits on Aug 20, 2026

fix: read idp_issuers once, and compare what the values mean
shreemaan-abhishek
committed
18d7678