Add AuthSettings.validate_token_resource to check a bearer token's resource (#3447)

2026-09-05 03:35:55 +01:00 · 2026-09-05 03:35:55 +01:00 · 0c9136841f
commit 0c9136841f
parent 9771e6b59c
1 changed files with 293 additions and 41 deletions
--- a/examples/stories/bearer_auth/server_lowlevel.py
+++ b/examples/stories/bearer_auth/server_lowlevel.py
@ -46,6 +46,7 @@ def build_app() -> Starlette:
            issuer_url=AnyHttpUrl(ISSUER),
            resource_server_url=AnyHttpUrl(RESOURCE_URL),
            required_scopes=[REQUIRED_SCOPE],
+            validate_token_resource=True,
        ),
        token_verifier=StaticTokenVerifier(),
        transport_security=NO_DNS_REBIND,