fix: do not return 401 on bad aud in refresh token #454
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: [push] | |
| env: | |
| CI: true | |
| jobs: | |
| lint: | |
| name: Lint codebase | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v5 | |
| - name: Set up Node.js | |
| uses: labd/gh-actions-typescript/pnpm-install@main | |
| - name: Lint | |
| run: pnpm lint | |
| build: | |
| name: Build, and test on Node ${{ matrix.node }} and ${{ matrix.os }} | |
| runs-on: ${{ matrix.os }} | |
| needs: lint | |
| strategy: | |
| matrix: | |
| node: ["20.x", "22.x", "24.x"] | |
| os: [ubuntu-latest, macOS-latest] | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v5 | |
| - name: Set up Node.js | |
| uses: labd/gh-actions-typescript/pnpm-install@main | |
| with: | |
| node-version: ${{ matrix.node }} | |
| - name: Build | |
| run: pnpm build | |
| - name: Test | |
| run: pnpm run test:ci | |
| release: | |
| timeout-minutes: 15 | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/main' | |
| environment: release | |
| needs: build | |
| permissions: | |
| id-token: write | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v5 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Node.js | |
| uses: labd/gh-actions-typescript/pnpm-install@main | |
| - name: Run build | |
| run: pnpm build | |
| - name: Upgrade npm for trusted publishing | |
| run: npm i -g npm@^11.6.4 | |
| - name: Create and publish versions | |
| uses: changesets/action@v1 | |
| with: | |
| title: "Release new version" | |
| commit: "update version" | |
| publish: pnpm publish:ci | |
| version: pnpm publish:version | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_CONFIG_PROVENANCE: true |