Decoded access token uses id_token instead #15

Open
opened 2025-01-08 14:29:30 +00:00 by erefes · 0 comments
erefes commented 2025-01-08 14:29:30 +00:00 (Migrated from gitlab.com)

The method to return the decoded access token uses the id_token instead of the access_token. This looks like a copy paste error.
See gitlab.com/kerkmann/leptos_oidc/-@26426dacb1 (b24749917179fb5e3e613ed2a703fcdcc6cdf9da_259_259)

At the moment all keys from the provider are tried when decoding the token. It may be worth checking if the key id in the token header uses one of the provided keys by the identity provider.

The method to return the decoded access token uses the `id_token` instead of the `access_token`. This looks like a copy paste error. See https://gitlab.com/kerkmann/leptos_oidc/-/commit/26426dacb1980eae32cc45b61dad5ab9f2d040d8#b24749917179fb5e3e613ed2a703fcdcc6cdf9da_259_259 At the moment all keys from the provider are tried when decoding the token. It may be worth checking if the key id in the token header uses one of the provided keys by the identity provider.
Sign in to join this conversation.
No labels
WIP
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
kerkmann/leptos_oidc#15
No description provided.