We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
3.1.2-beta.1
26.2
1.15.7
oidcc should validate / cast token responses as it does for the provider metadata.
oidcc
Given an Azure AD token response, the #oidcc_token_access.expires_in is a string and not a number as expected.
#oidcc_token_access.expires_in
Request token from Azure AD and check response.
The fields of the token response should be cast and validated.
The text was updated successfully, but these errors were encountered:
Properly Validate & Cast Token Responses (#306)
6d4f9fd
df4780b
2891795
Properly Validate & Cast Token Responses (#306) (#308)
a91a6da
maennchen
Successfully merging a pull request may close this issue.
oidcc version
3.1.2-beta.1
Erlang version
26.2
Elixir version
1.15.7
Summary
oidcc
should validate / cast token responses as it does for the provider metadata.Current behavior
Given an Azure AD token response, the
#oidcc_token_access.expires_in
is a string and not a number as expected.How to reproduce
Request token from Azure AD and check response.
Expected behavior
The fields of the token response should be cast and validated.
The text was updated successfully, but these errors were encountered: