ValidateJWTClaims common util to validate claims
(claims jwt.MapClaims, authTokenConfig *AuthTokenConfig)
| 141 | |
| 142 | // ValidateJWTClaims common util to validate claims |
| 143 | func (p *provider) ValidateJWTClaims(claims jwt.MapClaims, authTokenConfig *AuthTokenConfig) (bool, error) { |
| 144 | if claims["aud"] != p.config.ClientID { |
| 145 | return false, errors.New("invalid audience") |
| 146 | } |
| 147 | |
| 148 | if claims["nonce"] != authTokenConfig.Nonce { |
| 149 | return false, errors.New("invalid nonce") |
| 150 | } |
| 151 | |
| 152 | if claims["iss"] != authTokenConfig.HostName { |
| 153 | return false, fmt.Errorf("invalid issuer iss[%s] != hostname[%s]", claims["iss"], authTokenConfig.HostName) |
| 154 | } |
| 155 | |
| 156 | if claims["sub"] != authTokenConfig.User.ID && claims["sub"] != refs.StringValue(authTokenConfig.User.Email) { |
| 157 | return false, errors.New("invalid subject") |
| 158 | } |
| 159 | |
| 160 | return true, nil |
| 161 | } |
| 162 | |
| 163 | // ValidateJWTTokenWithoutNonce common util to validate claims without nonce |
| 164 | func (p *provider) ValidateJWTTokenWithoutNonce(claims jwt.MapClaims, authTokenConfig *AuthTokenConfig) (bool, error) { |
no test coverage detected