irl/cloud-api
1
0
Fork 0
forked from sr2/cloud-api
Code Pull requests Activity

fix: remove oidc audience requirement

Browse source
This commit is contained in:
Chris Milne 2026-05-28 15:16:21 +01:00
parent 6cfacad131
commit d03478637a
3 changed files with 0 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
example.env
View file

@ -1,7 +1,6 @@
SECRET_KEY="" SECRET_KEY=""
OIDC_CONFIG="https://sso.sr2.uk/realms/sr2/.well-known/openid-configuration" OIDC_CONFIG="https://sso.sr2.uk/realms/sr2/.well-known/openid-configuration"
OIDC_ISSUER="https://sso.sr2.uk/realms/sr2" OIDC_ISSUER="https://sso.sr2.uk/realms/sr2"
OIDC_AUDIENCE="account"
CLIENT_ID="" CLIENT_ID=""
DATABASE_NAME="cloud-api" DATABASE_NAME="cloud-api"

1
src/auth/config.py
View file

@ -9,7 +9,6 @@ from src.config import CustomBaseSettings
class AuthConfig(CustomBaseSettings): class AuthConfig(CustomBaseSettings):
OIDC_CONFIG: str = "" OIDC_CONFIG: str = ""
OIDC_ISSUER: str = "" OIDC_ISSUER: str = ""
OIDC_AUDIENCE: str = ""
CLIENT_ID: str = "" CLIENT_ID: str = ""

1
src/auth/service.py
View file

@ -37,7 +37,6 @@ async def get_current_user(oidc_auth_string: oidc_dependency) -> dict[str, Any]:
claims_options = { claims_options = {
"exp": {"essential": True}, "exp": {"essential": True},
"aud": {"essential": True, "value": "account"},
"iss": {"essential": True, "value": auth_settings.OIDC_ISSUER}, "iss": {"essential": True, "value": auth_settings.OIDC_ISSUER},
} }