cloudendpoints / endpoints-python

A Python framework for building RESTful APIs on Google App Engine
Apache License 2.0
51 stars 17 forks source link

api_key shouldn't count as an issuer for audience purposes #184

Closed inklesspen closed 5 years ago

inklesspen commented 5 years ago

In 4.7.0, OpenAPI generation raises a 'audiences must be a dict when third-party issuers are in use' exception if non-Google Auth issuers are in use. However, api_key is technically treated as an issuer, even though it's a different kind of security control. Ignore api_key for these purposes.