FAQ | This is a LIVE service | Changelog

Skip to content
Snippets Groups Projects
Commit 7febe88e authored by Dr Rich Wareham's avatar Dr Rich Wareham
Browse files

fix(id_token): change spelling of _API_GATEWAY_SERVICE_ACCOUNTS

Rename the variable to _DEFAULT_EXPECTED_AUTHORISED_PARTIES which better
reflects its actual meaning.
parent e431de6e
No related branches found
No related tags found
1 merge request!6verify incoming id token for API backends
Pipeline #469820 passed with warnings
......@@ -31,7 +31,7 @@ def _default_caching_request() -> Request:
_DEFAULT_CACHING_REQUEST = _default_caching_request()
# List of Google service accounts which represent the API gateway identity.
_API_GATEWAY_SERVICE_ACCOUNTS = ["api-gateway@api-meta-2555105a.iam.gserviceaccount.com"]
_DEFAULT_EXPECTED_AUTHORISED_PARTIES = ["api-gateway@api-meta-2555105a.iam.gserviceaccount.com"]
# Default URL used to fetch certificates corresponding to JWT signing keys
_DEFAULT_CERTS_URL = "https://www.googleapis.com/oauth2/v1/certs"
......@@ -80,7 +80,7 @@ def verify_id_token_for_api_backend(
expected_authorised_parties = (
set(expected_authorised_parties)
if expected_authorised_parties is not None
else _API_GATEWAY_SERVICE_ACCOUNTS
else _DEFAULT_EXPECTED_AUTHORISED_PARTIES
)
certs_url = certs_url if certs_url is not None else _DEFAULT_CERTS_URL
trusted_issuers = (
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment