Comment by jajko

1 day ago

Hundreds of thousands of tests? That sounds like quantity > quality or outright llm-generated ones, who even maintains them?

This was before LLMs. It was a combination of unit and end-to-end tests and tests written to comprehensively test every combination of parameters (eg test this security property holds for every single JWT algorithm we support etc). Also bear in mind that the product did a lot more than just OAuth.