stacklok / minder / 9387411858

53%

Build Type

push

github

Committed by web-flow

Commit Message

Check OpenID audience when validating token. (#3541)

* Add validation of 'aud' claim in JWT tokens, along with dev keycloak config support

* Add minder audience protocol mapper

* Switch to jwt.WithAudience

* Don't log full bearer tokens

* Set the default for aud to 'minder'

* Update client to request a specific audience in addition to openid

* Fix added test in jwauth

* Fix lint

---------

Co-authored-by: Eleftheria Stein-Kousathana <eleftheria@stacklok.com>

Run Details

6 of 15 new or added lines in 2 files covered. (40.0%)

1 existing line in 1 file now uncovered.

10488 of 19750 relevant lines covered (53.1%)

52.64 hits per line