Skip to content

v1.46.1

Compare
Choose a tag to compare
@bentranter bentranter released this 19 Sep 02:52
· 414 commits to master since this release
f9c6649

Fixes the OpenID Connect provider to more accurately follow the OpenID Connect Audiences spec by fixing a bug where we'd only check the aud claim if it were a string, but not an array. We now handle the cases where,

  1. The aud is a single string containing the Client ID
  2. The aud is an array. In this case, we check to see if the Client ID is present in the array.

Big thanks to @OvermindDL1 for the contribution! 🎉