Validate the authorization server metadata issuer on every discovery path (#3398)

This commit is contained in:
Max 2026-09-02 16:51:22 +01:00 • committed by GitHub
commit d060b36e1d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -30,6 +30,7 @@ oauth = ClientCredentialsOAuthProvider(
client_id="reporting-agent",
client_secret="...",
scope="user",
issuer="http://localhost:9000",
)