vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

key server: derive audience from host and scheme

Browse source
This commit is contained in:
Jimmy Zelinskie 2016-03-31 16:41:53 -04:00 committed by Jimmy Zelinskie
parent c79bb14049
commit c0ab45d335
2 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
config.py
View file

@ -304,4 +304,3 @@ class DefaultConfig(object):
# The timeout for service key approval.
UNAPPROVED_SERVICE_KEY_TTL_SEC = 60 * 60 * 24 # One day
KEY_SERVER_AUDIENCE_NAME = 'quay'

2
endpoints/key_server.py
View file

@ -16,7 +16,7 @@ from util.security import strictjwt
key_server = Blueprint('key_server', __name__)
JWT_HEADER_NAME = 'Authorization'
JWT_AUDIENCE = app.config['KEY_SERVER_AUDIENCE_NAME']
JWT_AUDIENCE = app.config['PREFERRED_URL_SCHEME'] + '://' + app.config['SERVER_HOSTNAME']
def _validate_jwk(jwk, kid):