Skip to content

Commit 8de45e3

Browse files
committed
Require jti claim on logout token
1 parent f64dd57 commit 8de45e3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/OpenIDConnectClient.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -634,7 +634,7 @@ public function verifyLogoutTokenClaims(object $claims): bool
634634
]
635635
);
636636

637-
$claimCheckerManager->check((array)$claims, ['aud', 'iss', 'iat', 'exp', 'events']);
637+
$claimCheckerManager->check((array)$claims, ['aud', 'iss', 'iat', 'exp', 'events', 'jti']);
638638

639639
} catch (MissingMandatoryClaimException | InvalidClaimException) {
640640
return false;

0 commit comments

Comments
 (0)