Skip to content

OAuth2: Allow empty JWTOptions.audience#732

Merged
tsegismont merged 1 commit intoeclipse-vertx:masterfrom
Traderjoe95:fix/allow-empty-audience-check
Sep 26, 2025
Merged

OAuth2: Allow empty JWTOptions.audience#732
tsegismont merged 1 commit intoeclipse-vertx:masterfrom
Traderjoe95:fix/allow-empty-audience-check

Conversation

@Traderjoe95
Copy link
Contributor

@Traderjoe95 Traderjoe95 commented Sep 4, 2025

Motivation:

Vert.x 5.0 breaks the option to put an empty array for JWTOptions.audience in order to disable the audience check. This is fixed by adding a condition to the audience check. Regression tests are provided for this case and also multiple other cases that were missing.

Fixes #731

Conformance:

You should have signed the Eclipse Contributor Agreement as explained in https://github.com/eclipse/vert.x/blob/master/CONTRIBUTING.md
Please also make sure you adhere to the code style guidelines: https://github.com/vert-x3/wiki/wiki/Vert.x-code-style-guidelines

@vietj vietj added this to the 5.1.0 milestone Sep 4, 2025
Copy link
Member

@tsegismont tsegismont left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for PR @Traderjoe95

Can you amend the first commit so that we can see it's only a renamed class?

@Traderjoe95 Traderjoe95 force-pushed the fix/allow-empty-audience-check branch from 0948181 to b3ee676 Compare September 10, 2025 16:04
@Traderjoe95
Copy link
Contributor Author

@tsegismont, I simply changed the name back and squashed the commits, that was the quickest. I couldn't come up with a better idea

Copy link
Member

@tsegismont tsegismont left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @Traderjoe95 , that looks good to me

@tsegismont tsegismont merged commit f18b5ad into eclipse-vertx:master Sep 26, 2025
6 checks passed
tsegismont pushed a commit to tsegismont/vertx-auth that referenced this pull request Sep 26, 2025
tsegismont added a commit that referenced this pull request Sep 26, 2025
Co-authored-by: Johannes Leupold <johannes.leupold@posteo.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Setting JWTOptions.audience to an empty list rejects all tokens

3 participants