personium / personium-core

Core module of Personium
https://personium.io
Apache License 2.0
88 stars 16 forks source link

App authn token not valid for app accounts with confidential role #503

Closed shimono closed 4 years ago

shimono commented 4 years ago

Bug overview

App authn token is not valid for app accounts with confidential role.

Reason

schema comparison is done without removing the confidential mark (#c) on subject url in the app auth token.

probably it is a degrade after 1.7.18