omniauth / omniauth_openid_connect / 9809320823

98%

push

github

Add `audience` to the `client_options` (#179)

* Add `audience` to the `client_options`

I've come across an issue where the `identifier` wasn't equal to the `audience` in the token.
This resulted in verification errors because currently it will verify the `aud` against the `identifier` if no `audience` is specified.

In this PR, I introduced the `audience` as `client_options` and will pass this along in the `verify!` of the `decoded_id_token` so the openid_connect gem [can handle the expected audience](https://github.com/nov/openid_connect/blob/e1eb8ea96/lib/openid_connect/response_object/id_token.rb#L30-L32)

* Only pass along `audience` if it is specified

* Update README.md

Co-authored-by: Roger Meier <r.meier@siemens.com>

---------

Co-authored-by: Roger Meier <r.meier@siemens.com>

3 of 3 new or added lines in 1 file covered. (100.0%)

296 of 301 relevant lines covered (98.34%)

66.88 hits per line