fix
This commit is contained in:
parent
7d9c9af001
commit
aeeb36747c
@ -104,11 +104,12 @@ func (auth *JWTAuthSetterVerifier) VerifyToken(user, token string) error {
|
|||||||
return fmt.Errorf("claims %v is invalid", parsedToken.Claims)
|
return fmt.Errorf("claims %v is invalid", parsedToken.Claims)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
sub := claims["sub"]
|
||||||
|
if sub != "remote_ssh" {
|
||||||
|
return fmt.Errorf("token sub is invalid")
|
||||||
|
}
|
||||||
if len(user) > 0 {
|
if len(user) > 0 {
|
||||||
id, found := claims["email"]
|
id := claims["aud"]
|
||||||
if !found {
|
|
||||||
id, _ = claims["id"]
|
|
||||||
}
|
|
||||||
if id != user {
|
if id != user {
|
||||||
return fmt.Errorf("token %s is not for user %s", token, user)
|
return fmt.Errorf("token %s is not for user %s", token, user)
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user