puiterwijk / flask-oidc

OpenID Connect support for Flask
BSD 2-Clause "Simplified" License
157 stars 219 forks source link

Fix for single audience in a list of audiences in id_token #66

Closed HarryKodden closed 6 years ago

HarryKodden commented 6 years ago

The check the validity of a id_token is failing when the id_token contains an 'aud' attribute representing a list of just a single audience party and the id_token does not contain 'azp', then the error will be raised 'Multiple audiences and not authorized party'.