tests fixed

Author: austinhockenberry

ChangeLog

@@ -1,4 +1,6 @@
 07/01/2026
+- propagate session destroy and closed-mode revocation store failures from
+  logout and session start instead of continuing as if logout succeeded
 - do not use the shared JWT verification cache for bearer JWT validation
   calls that pass additional claim validators, preventing a token accepted
   by one validator set from bypassing a stricter validator set on cache hit.

tests/Dockerfile

@@ -7,7 +7,7 @@ RUN ["luarocks", "install", "lua-resty-jwt"]
 
 # install test dependencies
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends git \
+    && apt-get install -y --no-install-recommends ca-certificates git \
     && rm -rf /var/lib/apt/lists/*
 RUN ["luarocks", "install", "busted"]
 RUN ["luarocks", "install", "LuaSocket"]

tests/spec/logout_revocation_spec.lua

@@ -1,4 +1,5 @@
 local http = require("socket.http")
+local ltn12 = require("ltn12")
 local test_support = require("test_support")
 require 'busted.runner'()
 
@@ -8,17 +9,19 @@ describe("when revocation_fail_mode is closed and the revocation store is unreac
       fail_mode = "closed",
       set_fails = true,
     },
-    unauth_action = "deny",
   })
   teardown(test_support.stop_server)
 
   local _, _, cookie = test_support.login()
 
-  local body, status = http.request({
+  local response_body = {}
+  local _, status = http.request({
     url = "http://127.0.0.1/default/logout",
     headers = { cookie = cookie },
     redirect = false,
+    sink = ltn12.sink.table(response_body),
   })
+  local body = table.concat(response_body)
 
   it("propagates destroy failure", function()
     assert.are.equals(401, status)