.
This commit is contained in:
		@@ -74,10 +74,10 @@ public sealed class AuthoritySigningKeyManagerTests
 | 
				
			|||||||
            var afterRotation = jwksService.Build();
 | 
					            var afterRotation = jwksService.Build();
 | 
				
			||||||
            Assert.Equal(2, afterRotation.Keys.Count);
 | 
					            Assert.Equal(2, afterRotation.Keys.Count);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
            var activeEntry = Assert.Single(afterRotation.Keys.Where(key => key.Status == AuthoritySigningKeyStatus.Active));
 | 
					            var activeEntry = Assert.Single(afterRotation.Keys, key => key.Status == AuthoritySigningKeyStatus.Active);
 | 
				
			||||||
            Assert.Equal("key-2", activeEntry.Kid);
 | 
					            Assert.Equal("key-2", activeEntry.Kid);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
            var retiredEntry = Assert.Single(afterRotation.Keys.Where(key => key.Status == AuthoritySigningKeyStatus.Retired));
 | 
					            var retiredEntry = Assert.Single(afterRotation.Keys, key => key.Status == AuthoritySigningKeyStatus.Retired);
 | 
				
			||||||
            Assert.Equal("key-1", retiredEntry.Kid);
 | 
					            Assert.Equal("key-1", retiredEntry.Kid);
 | 
				
			||||||
        }
 | 
					        }
 | 
				
			||||||
        finally
 | 
					        finally
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -12,3 +12,4 @@
 | 
				
			|||||||
|Authority whoami command|DevEx/CLI|Authority auth commands|**DONE (2025-10-10)** – Added `auth whoami` verb that displays subject/audience/expiry from cached tokens and handles opaque tokens gracefully.|
 | 
					|Authority whoami command|DevEx/CLI|Authority auth commands|**DONE (2025-10-10)** – Added `auth whoami` verb that displays subject/audience/expiry from cached tokens and handles opaque tokens gracefully.|
 | 
				
			||||||
|Expose auth client resilience settings|DevEx/CLI|Auth libraries LIB5|**DONE (2025-10-10)** – CLI options now bind resilience knobs, `AddStellaOpsAuthClient` honours them, and tests cover env overrides.|
 | 
					|Expose auth client resilience settings|DevEx/CLI|Auth libraries LIB5|**DONE (2025-10-10)** – CLI options now bind resilience knobs, `AddStellaOpsAuthClient` honours them, and tests cover env overrides.|
 | 
				
			||||||
|Document advanced Authority tuning|Docs/CLI|Expose auth client resilience settings|**DONE (2025-10-10)** – docs/09 and docs/10 describe retry/offline settings with env examples and point to the integration guide.|
 | 
					|Document advanced Authority tuning|Docs/CLI|Expose auth client resilience settings|**DONE (2025-10-10)** – docs/09 and docs/10 describe retry/offline settings with env examples and point to the integration guide.|
 | 
				
			||||||
 | 
					|Surface password policy diagnostics in CLI output|DevEx/CLI, Security Guild|AUTHSEC-CRYPTO-02-004|**TODO** – Bubble analyzer warnings during CLI startup (plugin load) and add tests/docs guiding operators to remediate weakened policies.|
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user