Jeroen SchweitzerandClaude Opus 4.5 3bb3b01dbd fix: OIDC audience validation - use string not list ...

python-jose jwt.decode() requires audience as string or None, not list.
Now extract and validate audience from unverified claims first,
then use token's actual audience for JWT decode.

Fixes "audience must be a string or None" error.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-08 15:35:05 +01:00

..

__init__.py

feat(auth): implement group-role mapping and permission system

2026-01-03 19:52:10 +01:00

controller.py

fix: handle non-UUID sub claim in auth sync

2026-01-04 17:45:05 +01:00

models.py

feat(auth): implement group-role mapping and permission system

2026-01-03 19:52:10 +01:00

oidc.py

fix: OIDC audience validation - use string not list

2026-01-08 15:35:05 +01:00

schemas.py

feat(auth): implement Phase 4 user profile and API key endpoints

2026-01-03 20:24:46 +01:00

service.py

fix: SQLAlchemy async lazy loading for new users

2026-01-04 18:05:34 +01:00