HSLdevcom / jore4

Public transport registry
European Union Public License 1.2
4 stars 2 forks source link

Fix the auth backend JWT token parsing #1740

Closed culka closed 3 months ago

culka commented 3 months ago

The auth backend JWT token audience parsing is currently incompatible with HSL-ID, this should be fixed asap so dev and test environments can be logged in to. There is a workaround for local development.

Error is: io.jsonwebtoken.IncorrectClaimException: Expected aud claim to be: x, but was: [x]

The incoming audience claim is an array which is then compared to the local client id -string, which will obviously fail.