openid: Merge duplicate aud claim values (#283)

ory · May 29, 2018 · 93618d6 · 93618d6
1 parent 57b1471
commit 93618d6
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/Gopkg.lock b/Gopkg.lock
diff --git a/Gopkg.toml b/Gopkg.toml
@@ -37,6 +37,10 @@
   name = "github.com/gorilla/mux"
   version = "1.5.0"
 
+[[constraint]]
+  version = "0.0.3"
+  name = "github.com/ory/go-convenience"
+
 [[constraint]]
   branch = "master"
   name = "github.com/gtank/cryptopasta"

diff --git a/handler/openid/strategy_jwt.go b/handler/openid/strategy_jwt.go
@@ -32,6 +32,7 @@ import (
 	"github.com/mohae/deepcopy"
 	"github.com/ory/fosite"
 	"github.com/ory/fosite/token/jwt"
+	"github.com/ory/go-convenience/stringsx"
 	"github.com/pkg/errors"
 )
 
@@ -227,7 +228,7 @@ func (h DefaultStrategy) GenerateIDToken(_ context.Context, requester fosite.Req
 	}
 
 	claims.Nonce = nonce
-	claims.Audience = append(claims.Audience, requester.GetClient().GetID())
+	claims.Audience = stringsx.Unique(append(claims.Audience, requester.GetClient().GetID()))
 	claims.IssuedAt = time.Now().UTC()
 
 	token, _, err = h.RS256JWTStrategy.Generate(claims.ToMapClaims(), sess.IDTokenHeaders())