Skip to content

Conversation

@jokurz
Copy link

@jokurz jokurz commented Nov 25, 2021

Unfortunately I have to deal with an auth server that is not compliant with OIDC standard. In my special case the audience is not equal to client_id. I would appreciate it if audience could be specified again as an optional argument.
This is related to following discussion: HarryMWinters#25 (comment)

Copy link
Collaborator

@samedii samedii left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry I didn't realize that this was posted to me. From what I've read the client_id has to be in the audience or it's not valid.

It might be nicer to verify an extra audience by either looking at the token you receive or using a custom token with pydantic validation?

aud: Union[str, List[str]]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants