Skip to content

Commit 20191de

Browse files
committed
fix(node): support multiple audiences in ID token validation
Change audience parameter from string to array in jose.jwtVerify() to properly validate tokens with multiple audiences (e.g., Choreo tokens with ['client-id', 'choreo:deployment:sandbox']). This fixes validation failures that caused immediate logout after authentication."
1 parent 8969759 commit 20191de

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

packages/node/src/__legacy__/utils/crypto-utils.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ export class NodeCryptoUtils implements Crypto<Buffer | string> {
6565
return jose
6666
.jwtVerify(idToken, key, {
6767
algorithms,
68-
audience: clientId,
68+
audience: [clientId],
6969
clockTolerance,
7070
issuer,
7171
subject,

0 commit comments

Comments
 (0)