jpadilla / pyjwt

JSON Web Token implementation in Python
https://pyjwt.readthedocs.io
MIT License
5.05k stars 676 forks source link

verify_aud flag required for verifying audiences from django oauth toolkit #812

Closed taylornelson-outside closed 1 year ago

taylornelson-outside commented 1 year ago

https://github.com/jazzband/django-oauth-toolkit/blob/492a867499b50f348c28db4ef3e429e8f46dc412/oauth2_provider/oauth2_validators.py#L887 requires an aud which is a client_id which pyjwt does not accept. I think pyjwt is probably correct here and would appreciate any guidance or pointers short of using verify_aud to skip verification. I could also be missing something. Thanks.

github-actions[bot] commented 1 year ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days