MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-25 12:06:10 -05:00
Code Issues Packages Projects Releases Wiki Activity

simplify JWKS decoding in OpenID and more tests (#10119)

Browse Source 
add tests for non-compliant Azure AD behavior
with "nonce" to fail properly and treat it as
expected behavior for non-standard JWT tokens.
This commit is contained in:
Harshavardhana
2020-07-25 08:42:41 -07:00
committed by GitHub
parent 416ec316bd
commit abbf6ce6cc
4 changed files with 94 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
cmd/config/identity/openid/jwt.go
View File

@@ -185,13 +185,7 @@ func (p *JWT) Validate(token, dsecs string) (map[string]interface{}, error) {
var claims jwtgo.MapClaims
jwtToken, err := jp.ParseWithClaims(token, &claims, keyFuncCallback)
if err != nil {
if err = p.PopulatePublicKey(); err != nil {
return nil, err
}
jwtToken, err = jwtgo.ParseWithClaims(token, &claims, keyFuncCallback)
if err != nil {
return nil, err
}
return nil, err
}
if !jwtToken.Valid {
@@ -203,7 +197,6 @@ func (p *JWT) Validate(token, dsecs string) (map[string]interface{}, error) {
}
return claims, nil
}
// ID returns the provider name and authentication type.