fix: update token retrieval logic in handleRedirectCallback and remove unused parseSSE function

2026-06-21 17:14:19 +02:00
parent fd453013fd
commit c440f5aa1e
2 changed files with 5 additions and 19 deletions
@@ -89,7 +89,7 @@ async def validate_token(credentials: HTTPAuthorizationCredentials = Security(se
        # `OIDC_AUDIENCE` unset and the audience check will be skipped.
        jwt_kwargs = {
            "algorithms": [key.get("alg", "RS256")],
-            "issuer": str(settings.oidc_issuer) if settings.oidc_verify_iss else None,
+            "issuer": discovery.get("issuer") if settings.oidc_verify_iss else None,
        }
        if settings.oidc_audience:
            jwt_kwargs["audience"] = settings.oidc_audience