summaryrefslogtreecommitdiff
path: root/internal/oauth
diff options
context:
space:
mode:
authorjwijenbergh <jeroenwijenbergh@protonmail.com>2023-10-31 11:49:08 +0100
committerJeroen Wijenbergh <46386452+jwijenbergh@users.noreply.github.com>2023-11-01 11:37:39 +0100
commitcad29dcc046163a944167bbaf2292b3e591e01c6 (patch)
treed0d9aa05fb426b08360673ee61b7d0dfdd833dd7 /internal/oauth
parentdb2b2ac0406877c80c3bcc578a32850de7caab7a (diff)
OAuth + Server: Make ISS optional for custom servers
Diffstat (limited to 'internal/oauth')
-rw-r--r--internal/oauth/oauth.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/internal/oauth/oauth.go b/internal/oauth/oauth.go
index f1cc9fe..d7da299 100644
--- a/internal/oauth/oauth.go
+++ b/internal/oauth/oauth.go
@@ -369,7 +369,7 @@ func (s *exchangeSession) Authcode(url *url.URL) (string, error) {
// first check ISS
iss := q.Get("iss")
- if s.ISS != iss {
+ if s.ISS != "" && s.ISS != iss {
return "", errors.Errorf("failed matching ISS; expected '%s' got '%s'", s.ISS, iss)
}
// Make sure the state is present and matches to protect against cross-site request forgeries