Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
api7
/
lua-resty-saml
Public
Notifications
You must be signed in to change notification settings
Fork
3
Star
2
Code
Issues
16
Pull requests
1
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
fix: accept OneTimeUse, and let the replay record honour it
- #53
#53
Merged
shreemaan-abhishek
merged 30 commits into
main
api7/lua-resty-saml:main
from
fix/one-time-use
api7/lua-resty-saml:fix/one-time-use
Copy head branch name to clipboard
Sep 1, 2026
Conversation
Commits
30
(30)
Checks
Files changed
Merged
fix: accept OneTimeUse, and let the replay record honour it
#53
shreemaan-abhishek
merged 30 commits into
main
api7/lua-resty-saml:main
from
fix/one-time-use
api7/lua-resty-saml:fix/one-time-use
Copy head branch name to clipboard
Commits
Commits on Aug 27, 2026
fix: accept OneTimeUse, and let the replay record honour it
Show description for 5624c19
shreemaan-abhishek
committed
5624c19
View commit details
Copy full SHA for 5624c19
Browse repository at this point
fix: warn on the handle the gate enforces on, and say when a full dict drops OneTimeUse
Show description for 8bf6364
shreemaan-abhishek
committed
8bf6364
View commit details
Copy full SHA for 8bf6364
Browse repository at this point
fix: say when an OneTimeUse assertion outlives its record
Show description for bd5226e
shreemaan-abhishek
committed
bd5226e
View commit details
Copy full SHA for bd5226e
Browse repository at this point
docs: name the level the OneTimeUse warning is logged at
shreemaan-abhishek
committed
b162b7b
View commit details
Copy full SHA for b162b7b
Browse repository at this point
docs: bound the OneTimeUse claim by the record's own limits
shreemaan-abhishek
committed
a01ffb8
View commit details
Copy full SHA for a01ffb8
Browse repository at this point
fix: read OneTimeUse whatever the order of the conditions
Show description for c769806
shreemaan-abhishek
committed
c769806
View commit details
Copy full SHA for c769806
Browse repository at this point
test: pin that without a record an OneTimeUse assertion is accepted again
shreemaan-abhishek
committed
b8728ad
View commit details
Copy full SHA for b8728ad
Browse repository at this point
test: give the recorded OneTimeUse case an expiry, a record check, and its own ID
Show description for a2e67be
shreemaan-abhishek
committed
a2e67be
View commit details
Copy full SHA for a2e67be
Browse repository at this point
build: rebuild both objects when a header changes
Show description for 3884513
shreemaan-abhishek
committed
3884513
View commit details
Copy full SHA for 3884513
Browse repository at this point
Commits on Aug 31, 2026
fix: weigh the OneTimeUse record against the cap before the clamp
Show description for fe7774e
shreemaan-abhishek
committed
fe7774e
View commit details
Copy full SHA for fe7774e
Browse repository at this point
fix: say an OneTimeUse record falls short only once it stands
Show description for 9fcf54f
shreemaan-abhishek
committed
9fcf54f
View commit details
Copy full SHA for 9fcf54f
Browse repository at this point
test: pin that an unstamped assertion never draws the OneTimeUse warn
Show description for c3d5bc5
shreemaan-abhishek
committed
c3d5bc5
View commit details
Copy full SHA for c3d5bc5
Browse repository at this point
test: pin that the full-dict line names OneTimeUse only when carried
Show description for 672ccd7
shreemaan-abhishek
committed
672ccd7
View commit details
Copy full SHA for 672ccd7
Browse repository at this point
fix: name the zone from new() in the full-dict line, and pin fail-open
Show description for 2c483e5
shreemaan-abhishek
committed
2c483e5
View commit details
Copy full SHA for 2c483e5
Browse repository at this point
refactor: answer OneTimeUse presence on its own line
Show description for 193da86
shreemaan-abhishek
committed
193da86
View commit details
Copy full SHA for 193da86
Browse repository at this point
test: carry the log guards in the two OneTimeUse warn blocks
Show description for 44e5034
shreemaan-abhishek
committed
44e5034
View commit details
Copy full SHA for 44e5034
Browse repository at this point
docs: carry the OneTimeUse diagnostics through the record's bounds
Show description for b935eaf
shreemaan-abhishek
committed
b935eaf
View commit details
Copy full SHA for b935eaf
Browse repository at this point
build: relink when the Makefile or the xmlsec archives change
Show description for 8dd5b26
shreemaan-abhishek
committed
8dd5b26
View commit details
Copy full SHA for 8dd5b26
Browse repository at this point
fix: claim only what the failed add knows, and name the issuer
Show description for 21e0d9a
shreemaan-abhishek
committed
21e0d9a
View commit details
Copy full SHA for 21e0d9a
Browse repository at this point
refactor: buffer the facts of the deferred warn, and name the issuer
Show description for 57bb15f
shreemaan-abhishek
committed
57bb15f
View commit details
Copy full SHA for 57bb15f
Browse repository at this point
test: anchor the fail-open line's severity
Show description for 6de2bf8
shreemaan-abhishek
committed
6de2bf8
View commit details
Copy full SHA for 6de2bf8
Browse repository at this point
test: allow the standard slack on the stamped record's TTL
Show description for 603b046
shreemaan-abhishek
committed
603b046
View commit details
Copy full SHA for 603b046
Browse repository at this point
test: fill the zone through one helper that vouches it is full
Show description for 30f4b17
shreemaan-abhishek
committed
30f4b17
View commit details
Copy full SHA for 30f4b17
Browse repository at this point
docs: state the opts handover contract, and claim less for the kept name
Show description for ca97738
shreemaan-abhishek
committed
ca97738
View commit details
Copy full SHA for ca97738
Browse repository at this point
fix: clamp only what the assertion claims, never replay_ttl
Show description for e734364
shreemaan-abhishek
committed
e734364
View commit details
Copy full SHA for e734364
Browse repository at this point
test: retire the mutation blocks the handover contract obsoleted
Show description for e8f1dad
shreemaan-abhishek
committed
e8f1dad
View commit details
Copy full SHA for e8f1dad
Browse repository at this point
test: count the fail-open line, once per presentation
Show description for 1668ce8
shreemaan-abhishek
committed
1668ce8
View commit details
Copy full SHA for 1668ce8
Browse repository at this point
fix: state outlives as the property, carry the outcome, blank the nil issuer
Show description for 934000b
shreemaan-abhishek
committed
934000b
View commit details
Copy full SHA for 934000b
Browse repository at this point
build: retire the archive prerequisite
Show description for 0678dbf
shreemaan-abhishek
committed
0678dbf
View commit details
Copy full SHA for 0678dbf
Browse repository at this point
Commits on Sep 1, 2026
fix: let replay_ttl raise the record cap
Show description for c7aef32
shreemaan-abhishek
committed
c7aef32
View commit details
Copy full SHA for c7aef32
Browse repository at this point
You can’t perform that action at this time.
