t.Errorf("%s: failed to parse permitted email addresses: %#v", test.name, cert.PermittedEmailAddresses)
		}

		if len(cert.ExcludedEmailAddresses) != 2 || cert.ExcludedEmailAddresses[0] != ".example.com" || cert.ExcludedEmailAddresses[1] != "example.com" {
			t.Errorf("%s: failed to parse excluded email addresses: %#v", test.name, cert.ExcludedEmailAddresses)
		}

github-actions-cache-details.png...

			},
			claims: fmt.Sprintf(`{
				"iss": "https://auth.example.com",
				"aud": "my-client",
				"email": "******@****.***",
				"email_verified": false,
				"exp": %d
			}`, valid.Unix()),
			wantErr: "oidc: email not verified",
		},
		{
			// If "email_verified" isn't present, assume true
			name: "no-email-verified-claim",
			options: Options{
				JWTAuthenticator: apiserver.JWTAuthenticator{

AW51B,EAAO+1B,GAAGsD,OAAQ5C,EAAIb,UAGrCa,EAAIb,SAAW51B,EAAO+1B,GAAGsD,OAAOxV,UAMjB,MAAb4S,EAAI/b,QAA+B,IAAd+b,EAAI/b,QAC7B+b,EAAI/b,MAAQ,MAIb+b,EAAIlI,IAAMkI,EAAI4B,SAEd5B,EAAI4B,SAAW,WACTh6B,EAAYo4B,EAAIlI,MACpBkI,EAAIlI,IAAI9wB,KAAMT,MAGVy5B,EAAI/b,OACR1a,EAAOygB,QAASzjB,KAAMy5B,EAAI/b,QAIrB+b,GAGRz2B,EAAOG,GAAGgC,OAAQ,CACjBm3B,OAAQ,SAAUF,EAAOG,EAAIlG,EAAQlyB,GAGpC,OAAOnE,KAAKyQ,OAAQgU,IAAqBG,IAAK,UAAW,GAAIc,OAG3D1gB,MAAMw3B,QAAS,CAAEjG,QAASgG,GAAMH,EAAO/F,EAAQlyB,IAElDq4B,QAAS,SAAU3Z,EAAMuZ,E...

//
//	-exec xprog
//	    Run the test binary using xprog. The behavior is the same as
//	    in 'go run'. See 'go help run' for details.
//
//	-json
//	    Convert test output to JSON suitable for automated processing.
//	    See 'go doc test2json' for the encoding details.
//
//	-o file
//	    Compile the test binary to the named file.
//	    The test still runs (unless -c or -i is specified).

AW51B,EAAO+1B,GAAGsD,OAAQ5C,EAAIb,UAGrCa,EAAIb,SAAW51B,EAAO+1B,GAAGsD,OAAOxV,UAMjB,MAAb4S,EAAI/b,QAA+B,IAAd+b,EAAI/b,QAC7B+b,EAAI/b,MAAQ,MAIb+b,EAAIlI,IAAMkI,EAAI4B,SAEd5B,EAAI4B,SAAW,WACTh6B,EAAYo4B,EAAIlI,MACpBkI,EAAIlI,IAAI9wB,KAAMT,MAGVy5B,EAAI/b,OACR1a,EAAOygB,QAASzjB,KAAMy5B,EAAI/b,QAIrB+b,GAGRz2B,EAAOG,GAAGgC,OAAQ,CACjBm3B,OAAQ,SAAUF,EAAOG,EAAIlG,EAAQlyB,GAGpC,OAAOnE,KAAKyQ,OAAQgU,IAAqBG,IAAK,UAAW,GAAIc,OAG3D1gB,MAAMw3B,QAAS,CAAEjG,QAASgG,GAAMH,EAAO/F,EAAQlyB,IAElDq4B,QAAS,SAAU3Z,EAAMuZ,E...

    public static final String LABELS_SURAME = "{labels.surame}";

    /** The key of the message: E-mail */
    public static final String LABELS_user_mail = "{labels.user_mail}";

    /** The key of the message: E-mail */
    public static final String LABELS_MAIL = "{labels.mail}";

    /** The key of the message: Employee Number */

an OpenAPI v3 format string. Unknown formats are ignored. The following formats are validated:\n\n- bsonobjectid: a bson object ID, i.e. a 24 characters hex string - uri: an URI as parsed by Golang net/url.ParseRequestURI - email: an email address as parsed by Golang net/mail.ParseAddress - hostname: a valid representation for an Internet host name, as defined by RFC 1034, section 3.1 [RFC1034]. - ipv4: an IPv4 IP as parsed by Golang net.ParseIP - ipv6: an IPv6 IP as parsed by Golang net.ParseIP...

This field is set via the /status subresource. Once populated, this field is immutable.\n\nIf the certificate signing request is denied, a condition of type \"Denied\" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type \"Failed\" is added and this field remains empty.\n\nValidation requirements:\n 1. certificate must contain one or more PEM blocks.\n 2. All PEM blocks must have the \"CERTIFICATE\" label, contain no headers, and the encoded data\n ...

          <description>The full name of the contributor.</description>
          <type>String</type>
        </field>
        <field>
          <name>email</name>
          <version>3.0.0+</version>
          <description>The email address of the contributor.</description>
          <type>String</type>
        </field>
        <field>
          <name>url</name>
          <version>3.0.0+</version>