Skip to content

7.0.0

Choose a tag to compare

@paulineribeyre paulineribeyre released this 25 Jul 21:11
· 12 commits to master since this release
c7990f3

What's Changed

New Features

  • The audience aud field of JWT tokens is not validated anymore. The validation of which Gen3 instance a token is meant for is already done by using the issuer iss field to get public keys and verify the signature.

Breaking Changes

  • The audience aud field of JWT tokens is not validated anymore.

Bug Fixes

  • Fix "Authentication Error: Audience doesn't match" errors in Gen3 services (such as Sheepdog and Peregrine) running in a local Helm instance. The tokens' "audience" set by Fence (typically the BASE_URL setting "https://hostname/user") did not match the "audience" used by the services (typically the USER_API setting "http://fence-service").

Full Changelog: 6.2.7...7.0.0