mirror of
https://github.com/zitadel/zitadel.git
synced 2026-11-04 13:16:43 -06:00
Livio Spring
999e2bbc81
# Which Problems Are Solved
While JWT IdPs typically require specific setups to exchange the JWT, any valid token issued would be accepted and there was no audience check. This could lead to potential misuse where a correctly signed token for another client / audience, would be accepted valid by the IdP.
# How the Problems Are Solved
- Added the possibility to manage the required audience (single string) on a JWT IdP. If set, the `aud` claim, must contain the configured string. If no audience is set on the provider, the claim is not validated (as is).
# Additional Changes
None
# Additional Context
None
(cherry picked from commit d184e976fc)
3 lines
93 B
SQL
3 lines
93 B
SQL
ALTER TABLE IF EXISTS projections.idp_templates6_jwt
|
|
ADD COLUMN IF NOT EXISTS audience text;
|