Support configurable audience claims and extra audiences in OIDC token verification
Support configurable audience claims and extra audiences in OIDC token verification: a task in LegoFlow-SWE (Harbor dataset). oauth2-proxy currently rejects JWTs that lack an aud claim, but per RFC 7519 this is only required when the claim is present. This causes machine‑to‑machine (M2M) calls to…
The task
oauth2-proxy currently rejects JWTs that lack an `aud` claim, but per RFC 7519 this is only required when the claim is present. This causes machine‑to‑machine (M2M) calls to fail when using AWS Cognito access tokens issued via the client credentials flow – those tokens omit `aud` entirely and instead include a…
Part of Lego-X/LegoFlow-SWE.