Paul Chobert db25101de4 Fix flaky fail_verify_id_token_wrong_auth_time test ...

The oidc-client integration tests read the real system clock through a
`now()` helper. The ID token builder generates a fresh RSA key before
stamping `iat`, while each test captured its own `now` earlier for
verification. Under coverage instrumentation on a loaded CI runner, the
two key generations in `fail_verify_id_token_wrong_auth_time` took more
than the 5 minute `iat` leeway, so verification failed on `iat` before
ever reaching the `auth_time` check the test asserts on.

Make the helper return a frozen `MockClock` timestamp instead. Every
token and verification in the binary now shares one instant, so setup
duration can no longer affect the outcome, and the clippy opt-out for
`Utc::now()` goes away.

2026-09-03 16:09:44 +02:00

..

src

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

tests/it

Fix flaky fail_verify_id_token_wrong_auth_time test

2026-09-03 16:09:44 +02:00

Cargo.toml

Fix flaky fail_verify_id_token_wrong_auth_time test

2026-09-03 16:09:44 +02:00