Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Audience claim ignored when using own OIDC provider #82

Open
jezwilkinson opened this issue Jan 21, 2025 · 0 comments
Open

Audience claim ignored when using own OIDC provider #82

jezwilkinson opened this issue Jan 21, 2025 · 0 comments

Comments

@jezwilkinson
Copy link

Hi,
I am trying to configure an instance of motley-cue to accept tokens from my organisation's Keycloak for SSH login. This is working, but when I state in the config that the token should have a specific audience, this requirement gets ignored as my auth server is not foreseen in the list of supported OPs in requirements.py ("Issuer does not support audience setting").

The only way I can see to get around this is to patch my installation of FLAAT to manually include my provider in the hardcoded list of OPS_THAT_SUPPORT_AUDIENCE in flaat/requirements.py. Is there any way that I can assert in the configuration that the audience claim is supported, or is this currently the only way to use an audience requirement?
Many thanks for any advice on this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant