fix: comply with RFC6750 UserInfo endpoint requirements (#16592)

This commit is contained in:
Harshavardhana
2023-02-10 08:50:25 -08:00
committed by GitHub
parent 72daccd468
commit d65debb6bc
4 changed files with 18 additions and 15 deletions

View File

@@ -361,7 +361,7 @@ func (sts *stsAPIHandlers) AssumeRoleWithSSO(w http.ResponseWriter, r *http.Requ
}
// Validate JWT; check clientID in claims matches the one associated with the roleArn
if err := globalOpenIDConfig.Validate(roleArn, token, accessToken, r.Form.Get(stsDurationSeconds), claims); err != nil {
if err := globalOpenIDConfig.Validate(r.Context(), roleArn, token, accessToken, r.Form.Get(stsDurationSeconds), claims); err != nil {
switch err {
case openid.ErrTokenExpired:
switch action {