From e7d9a4479682f7372ad712d343c8e67048ce79e3 Mon Sep 17 00:00:00 2001 From: Mabe Date: Sun, 21 Jun 2026 17:16:33 +0200 Subject: [PATCH] fix: retrieve discovery document in validate_token function for improved token validation --- backend/app/auth.py | 1 + 1 file changed, 1 insertion(+) diff --git a/backend/app/auth.py b/backend/app/auth.py index 69a468f..d6ceb5b 100644 --- a/backend/app/auth.py +++ b/backend/app/auth.py @@ -82,6 +82,7 @@ async def validate_token(credentials: HTTPAuthorizationCredentials = Security(se token = credentials.credentials key = get_signing_key(token) public_key = jwk.construct(key) + discovery = get_discovery() try: # Only pass `audience` to the decoder if configured. Some providers # (or local development setups) may not include the aud claim in a