fix: add a trailing slash to jwt audiences

reearth · Apr 7, 2022 · e96f78a · e96f78a
1 parent 0c0e28c
commit e96f78a
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/internal/app/jwt.go b/internal/app/jwt.go
@@ -59,11 +59,20 @@ func NewMultiValidator(providers []AuthConfig) (MultiValidator, error) {
 		}
 		algorithm := validator.SignatureAlgorithm(alg)
 
+		// add a trailing slash (auth0-spa-js adds a trailing slash to audiences)
+		aud := append([]string{}, p.AUD...)
+		for i, a := range aud {
+			if !strings.HasSuffix(a, "/") {
+				a += "/"
+			}
+			aud[i] = a
+		}
+
 		v, err := validator.New(
 			provider.KeyFunc,
 			algorithm,
 			issuerURL.String(),
-			p.AUD,
+			aud,
 			validator.WithCustomClaims(func() validator.CustomClaims {
 				return &customClaims{}
 			}),