add extra auth audience (#2350)

This commit is contained in:
David Fry 2024-08-01 18:52:50 +02:00 committed by GitHub
parent 216d9f2ee8
commit f84b606506
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -56,6 +56,10 @@ type Config struct {
func (c Config) GetAuthAudiences() []string { func (c Config) GetAuthAudiences() []string {
audiences := []string{c.HttpConfig.AuthAudience} audiences := []string{c.HttpConfig.AuthAudience}
if c.HttpConfig.ExtraAuthAudience != "" {
audiences = append(audiences, c.HttpConfig.ExtraAuthAudience)
}
if c.DeviceAuthorizationFlow != nil && c.DeviceAuthorizationFlow.ProviderConfig.Audience != "" { if c.DeviceAuthorizationFlow != nil && c.DeviceAuthorizationFlow.ProviderConfig.Audience != "" {
audiences = append(audiences, c.DeviceAuthorizationFlow.ProviderConfig.Audience) audiences = append(audiences, c.DeviceAuthorizationFlow.ProviderConfig.Audience)
} }
@ -90,6 +94,8 @@ type HttpServerConfig struct {
OIDCConfigEndpoint string OIDCConfigEndpoint string
// IdpSignKeyRefreshEnabled identifies the signing key is currently being rotated or not // IdpSignKeyRefreshEnabled identifies the signing key is currently being rotated or not
IdpSignKeyRefreshEnabled bool IdpSignKeyRefreshEnabled bool
// Extra audience
ExtraAuthAudience string
} }
// Host represents a Wiretrustee host (e.g. STUN, TURN, Signal) // Host represents a Wiretrustee host (e.g. STUN, TURN, Signal)