Merge pull request #427 from serverlessworkflow/fix-oauth2-endpoint-validation

cdavernas · web-flow · commit 2730c0ec2009 · 2024-10-14T15:23:35.000+02:00
fix(Runner): Fixed the OAuth2TokenManager to not validate the OIDC discovery document endpoints
diff --git a/src/runner/Synapse.Runner/Services/OAuth2TokenManager.cs b/src/runner/Synapse.Runner/Services/OAuth2TokenManager.cs
@@ -67,6 +67,7 @@ public virtual async Task<OAuth2Token> GetTokenAsync(OAuth2AuthenticationSchemeD
                 Policy = new()
                 {
                     ValidateIssuerName = false,
+                    ValidateEndpoints = false,
                     RequireHttps = false
                 }
             };

Original file line number	Diff line number	Diff line change
`@@ -67,6 +67,7 @@ public virtual async Task<OAuth2Token> GetTokenAsync(OAuth2AuthenticationSchemeD`
`67`	`67`	`Policy = new()`
`68`	`68`	`{`
`69`	`69`	`ValidateIssuerName = false,`
	`70`	`+ ValidateEndpoints = false,`
`70`	`71`	`RequireHttps = false`
`71`	`72`	`}`
`72`	`73`	`};`