Fix for single audience in a list of audiences in id_token

puiterwijk / flask-oidc

OpenID Connect support for Flask

BSD 2-Clause "Simplified" License

154 stars 217 forks source link

Fix for single audience in a list of audiences in id_token #66

Closed HarryKodden closed 5 years ago

HarryKodden commented 5 years ago

The check the validity of a id_token is failing when the id_token contains an 'aud' attribute representing a list of just a single audience party and the id_token does not contain 'azp', then the error will be raised 'Multiple audiences and not authorized party'.