We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent fd5d3d8 commit d18edf6Copy full SHA for d18edf6
changelog.d/18385.misc
@@ -0,0 +1 @@
1
+Don't validate the `at_hash` (access token hash) field in OIDC ID Tokens if we don't end up actually using the OIDC Access Token.
synapse/handlers/oidc.py
@@ -599,7 +599,7 @@ def _uses_access_token(self) -> bool:
599
# from the userinfo endpoint. Therefore we only have a single criteria
600
# to check right now but this may change in the future and this function
601
# should be updated if more usages are introduced.
602
- #
+ #
603
# For example, if we start to use the access_token given to us by the
604
# IdP for more things, such as accessing Resource Server APIs.
605
return self._uses_userinfo
0 commit comments