lukaszraczylo 7d2531e1e4 Lint: fix real int-truncation bug; document intentional gosec findings ...

- TransportPool configKey: write conn-count ints verbatim (strconv) instead of
  byte() truncation — a config value >=256 previously truncated and made two
  distinct configs collide on one key, silently sharing a transport with the
  wrong settings (real fix, gosec G115).
- Document design-intentional gosec findings with //nolint:gosec + rationale:
  G117 (clients_secret intentionally marshaled into stored creds JSON),
  G704 (tokenURL is the trusted discovery endpoint), G124 (delete/test cookie,
  Secure set conditionally), G118 (long-lived background refresh) and pool
  utils short-ID rune, testutil mock server redirects.

Result: full-tree golangci-lint now reports 0 issues (was ~12). Build, vet,
and the full test suite remain green.

2026-08-12 23:10:00 +01:00

..

fixtures

Cleanup [dec2025] (#101)

2025-12-09 01:38:02 +00:00

mocks

Smarter approach to the cookies (#103)

2025-12-12 18:35:06 +00:00

servers

Lint: fix real int-truncation bug; document intentional gosec findings

2026-08-12 23:10:00 +01:00

compat.go

Cleanup [dec2025] (#101)

2025-12-09 01:38:02 +00:00

suite.go

Lint: fix real int-truncation bug; document intentional gosec findings

2026-08-12 23:10:00 +01:00