graphql-engine/server/src-lib/Hasura/Server/Auth
Anon Ray f2f14e727b Merge pull request from GHSA-2j98-fw5g-j43v
* fix bug in audience check while verifying JWT

  - previously the check was converting the audience type into a string
  and then comparing with the conf value. all audience types (as it is a
  string or URI) will convert to plain strings
  - use the Audience type from the jose library for comparing

* add docs for audience

* add issuer check as well

* docs minor syntax fix

* skip audience check if not given in conf

* minor docs update

* qualify import jose library
2019-07-11 09:58:39 +00:00
..
JWT breaking: server logging changes (close #507, close #2171) (#1835) 2019-07-11 05:37:06 +00:00
JWT.hs Merge pull request from GHSA-2j98-fw5g-j43v 2019-07-11 09:58:39 +00:00