Keycloak.auth method does not pass audience to verify_token

kroketio / quart-keycloak

Add Keycloak OpenID Connect support to your Quart application.

BSD 3-Clause "New" or "Revised" License

12 stars 4 forks source link

Open philsorensen opened 6 months ago

philsorensen commented 6 months ago

In line 359 of openid.py, the Keycloak.auth method does not pass the audience to the verify_token function. The line is:

self.verify_token(access_token)

it should be

self.verify_token(access_token, audience=self._audience)

AliMickey commented 5 months ago

Ha! I created the PR then saw this issue. Linking for visibility: https://github.com/kroketio/quart-keycloak/pull/9