Ralf Haferkamp b7990875c1 oidc: Remove "aud" claim validation of logout tokens (#6156) ...

The "aud" claim of the logout token is supposed to contain the client-id
of the client for which the token was issued. Our current implementation of
validating that claim is somewhat broken. We only allow to configure a single
value for the allowed client id. But we have different client-ids
accessing oCIS.

This completely removes the current validation of the `aud` claim until
we come up with a working solution. As we currently require a session id
to be present in the logout token the risk not validating the `aud`
claim is pretty low.

Related: #6149

2023-04-27 10:34:09 +02:00

..

health.go

remove Log prefix from configlog functions

2022-08-22 08:08:18 +02:00

root.go

Remove redundant setting of cli.HelpFlag

2022-07-05 14:59:06 +02:00

server.go

oidc: Remove "aud" claim validation of logout tokens (#6156)

2023-04-27 10:34:09 +02:00

version.go

rename extensions to services (leftover occurences)

2022-08-17 15:36:52 +02:00