We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9b65233 commit cf477c3Copy full SHA for cf477c3
authress/api/token_verifier.py
@@ -56,7 +56,7 @@ def verify_token(self, authressCustomDomain, token, options=None):
56
if (clientIdMatcher is not None and clientIdMatcher.group(1) != unverifiedPayload['sub']):
57
raise Exception("Unauthorized", "Service ID does not match token sub claim")
58
59
- jwk = self.get_public_key(f"{issuer}/.well-known/openid-configuration/jwks?kid={kid}", kid)
+ jwk = self.get_public_key(f"{issuer}/.well-known/openid-configuration/jwks?kid={kid}&iss={urlparse(issuer).netloc}", kid)
60
61
try:
62
return jwt.decode(authenticationToken, jwt.api_jwk.PyJWK.from_dict(jwk).key, algorithms=['EdDSA'], options = { 'verify_aud': False })
0 commit comments