entrouvert
/
authentic
16
0
Fork 0
Code Issues Pull Requests 35 Releases Activity

fix issuer check

This commit is contained in:
Benjamin Dauvergne 2017-06-22 13:41:22 +02:00
parent 68fdf61c9a
commit 9587e13780
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/authentic2_auth_fc/models.py
View File

@ -48,7 +48,7 @@ def parse_id_token(id_token, client_id=None, client_secret=None):
if 'exp' not in payload or parse_timestamp(payload['exp']) < now():
return None, 'id_token is expired'
parsed = urlparse.urlparse(app_settings.authorize_url)
if 'iss' not in payload or payload['iss'] != '%s://%s/' % (parsed.scheme, parsed.netloc):
if 'iss' not in payload or payload['iss'] != '%s://%s' % (parsed.scheme, parsed.netloc):
return None, 'wrong issuer received, %r' % payload['iss']
return payload, None