okta-jwt-verifier-python
okta-jwt-verifier-python copied to clipboard
Updated code to verify client_id against cid instead of aud.
Changes Made
This pull request addresses an issue in the codebase where the client_id was being verified against the aud claim, which was incorrect. The correct verification should be against the cid claim. This PR updates the code to verify the client_id against the cid claim and ensures the variable names in the code and tests reflect this correction.
Details
- In the
AccessTokenVerifierclass, theverify_client_idmethod has been updated to verify theclient_idagainst thecidclaim instead of theaudclaim. - The corresponding tests have been updated to use the correct variable names.
Reasons for the Change
The previous code was performing an incorrect verification of the client_id against the aud claim, which could lead to validation errors. This update ensures that the client_id is correctly verified against the cid claim, aligning with the intended functionality.
Checklist
- [x] Code has been updated to verify
client_idagainst thecidclaim. - [x] Tests have been modified to use the updated variable names.
- [x] Code and tests have been reviewed for correctness.
- [x] No new linting or style violations introduced.
- [x] Existing test suite passes with the changes.
Related Issues
None.
Additional Notes
No additional notes.