Nail/ipwhitelist-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bump 0.5.32 — remove audience check from JWT verify

Browse Source
This commit is contained in:
naeel
2026-06-09 22:17:23 +04:00
parent 4a45546b0d
commit 9fc3665292
2 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"name": "ipwhitelist", "name": "ipwhitelist",
"version": "0.5.31", "version": "0.5.32",
"description": "IP WhiteList microservice for cloud provider", "description": "IP WhiteList microservice for cloud provider",
"main": "server.js", "main": "server.js",
"scripts": { "scripts": {
src/auth.js
+1 -2
View File
@@ -241,9 +241,8 @@ function verifyOidcToken(token) {
const pem = crypto.createPublicKey({ key, format: 'jwk' }).export({ type: 'spki', format: 'pem' }); const pem = crypto.createPublicKey({ key, format: 'jwk' }).export({ type: 'spki', format: 'pem' });
// Проверяем issuer — защита от токенов других realm. // Проверяем issuer — защита от токенов других realm.
// audience проверяем только если задан KC_CLIENT_ID (для OIDC-режима). // audience не проверяем — не все KC-клиенты корректно выставляют aud claim.
const opts = { algorithms: ['RS256'], issuer: KC_BASE_URL }; const opts = { algorithms: ['RS256'], issuer: KC_BASE_URL };
if (KC_CLIENT_ID) opts.audience = KC_CLIENT_ID;
return jwt.verify(token, pem, opts); return jwt.verify(token, pem, opts);
} }