From 7605ca4106ff230cc326a6bbf059bd1dd6f5fa8d Mon Sep 17 00:00:00 2001 From: mo khan Date: Thu, 15 May 2025 09:26:52 -0600 Subject: refactor: inline usage of validate id token --- app/middleware/id_token.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'app') diff --git a/app/middleware/id_token.go b/app/middleware/id_token.go index dbaf691..cc5e79b 100644 --- a/app/middleware/id_token.go +++ b/app/middleware/id_token.go @@ -3,6 +3,7 @@ package middleware import ( "net/http" + xoidc "github.com/coreos/go-oidc/v3/oidc" "github.com/xlgmokha/x/pkg/log" "github.com/xlgmokha/x/pkg/x" xcfg "gitlab.com/gitlab-org/software-supply-chain-security/authorization/sparkled/app/cfg" @@ -17,7 +18,8 @@ func IDToken(cfg *oidc.OpenID, parsers ...TokenParser) func(http.Handler) http.H for _, parser := range parsers { rawIDToken := parser(r) if x.IsPresent(rawIDToken) { - idToken, err := cfg.ValidateIDToken(r.Context(), rawIDToken) + verifier := cfg.Provider.VerifierContext(r.Context(), &xoidc.Config{ClientID: cfg.Config.ClientID}) + idToken, err := verifier.Verify(r.Context(), rawIDToken.String()) if err != nil { pls.LogError(r.Context(), err) -- cgit v1.2.3