Files
Bastien Wermeille 9ca753ab5c 🐛(oidc) make iss claim optional in introspection response validation
RFC 7662 does not require the `iss` field in token introspection
responses. Some providers (e.g. GitLab via Doorkeeper) do not include
it, causing authentication to fail. The value is still validated when
present.

Signed-off-by: Bastien Wermeille <bastien.wermeille@gmail.com>
2026-04-03 14:24:08 +02:00
..
2025-10-27 11:01:05 +01:00
2026-04-03 14:14:56 +02:00
2025-03-29 08:55:01 +01:00
2025-06-06 17:40:58 +02:00
2025-03-29 08:55:01 +01:00