attune-system/attune
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

formatting

Browse Source
This commit is contained in:
David Culbreth
2026-03-20 12:38:12 -05:00
parent 4df621c5c8
commit 43b27044bb
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
crates/api/src/auth/oidc.rs
View File

@@ -551,8 +551,9 @@ async fn verify_id_token(
oidc: &OidcConfig, oidc: &OidcConfig,
expected_nonce: &str, expected_nonce: &str,
) -> Result<VerifiedIdTokenClaims, ApiError> { ) -> Result<VerifiedIdTokenClaims, ApiError> {
let header = decode_header(raw_id_token) let header = decode_header(raw_id_token).map_err(|err| {
.map_err(|err| ApiError::Unauthorized(format!("OIDC ID token header decode failed: {err}")))?; ApiError::Unauthorized(format!("OIDC ID token header decode failed: {err}"))
})?;
let algorithm = match header.alg { let algorithm = match header.alg {
Algorithm::RS256 => Algorithm::RS256, Algorithm::RS256 => Algorithm::RS256,
@@ -570,14 +571,19 @@ async fn verify_id_token(
.map_err(|err| ApiError::InternalServerError(format!("Failed to fetch OIDC JWKS: {err}")))? .map_err(|err| ApiError::InternalServerError(format!("Failed to fetch OIDC JWKS: {err}")))?
.json::<JwkSet>() .json::<JwkSet>()
.await .await
.map_err(|err| ApiError::InternalServerError(format!("Failed to parse OIDC JWKS: {err}")))?; .map_err(|err| {
ApiError::InternalServerError(format!("Failed to parse OIDC JWKS: {err}"))
})?;
let jwk = jwks let jwk = jwks
.keys .keys
.iter() .iter()
.find(|jwk| { .find(|jwk| {
jwk.common.key_id == header.kid jwk.common.key_id == header.kid
&& matches!(jwk.common.public_key_use, Some(jsonwebtoken::jwk::PublicKeyUse::Signature)) && matches!(
jwk.common.public_key_use,
Some(jsonwebtoken::jwk::PublicKeyUse::Signature)
)
&& matches!( && matches!(
jwk.algorithm, jwk.algorithm,
AlgorithmParameters::RSA(_) | AlgorithmParameters::EllipticCurve(_) AlgorithmParameters::RSA(_) | AlgorithmParameters::EllipticCurve(_)