fix

pkg/auth/jwt.go

@@ -104,11 +104,12 @@ func (auth *JWTAuthSetterVerifier) VerifyToken(user, token string) error {
 		return fmt.Errorf("claims %v is invalid", parsedToken.Claims)
 	}
 
+	sub := claims["sub"]
+	if sub != "remote_ssh" {
+		return fmt.Errorf("token sub is invalid")
+	}
 	if len(user) > 0 {
-		id, found := claims["email"]
-		if !found {
-			id, _ = claims["id"]
-		}
+		id := claims["aud"]
 		if id != user {
 			return fmt.Errorf("token %s is not for user %s", token, user)
 		}