Adding issuer (GoogleCloudPlatform#2266)

* Adding issuer * Update make_iap_request.py
abema · Jul 19, 2019 · 210b7b2 · 210b7b2
1 parent 729efa6
commit 210b7b2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/iap/make_iap_request.py b/iap/make_iap_request.py
@@ -48,7 +48,7 @@ def make_iap_request(url, client_id, method='GET', **kwargs):
     # Set the default timeout, if missing
     if 'timeout' not in kwargs:
         kwargs['timeout'] = 90
-        
+
     # Figure out what environment we're running in and get some preliminary
     # information about the service account.
     bootstrap_credentials, _ = google.auth.default(

diff --git a/iap/validate_jwt.py b/iap/validate_jwt.py
@@ -77,6 +77,7 @@ def _validate_iap_jwt(iap_jwt, expected_audience):
         decoded_jwt = jwt.decode(
             iap_jwt, key,
             algorithms=['ES256'],
+            issuer='https://cloud.google.com/iap',
             audience=expected_audience)
         return (decoded_jwt['sub'], decoded_jwt['email'], '')
     except (jwt.exceptions.InvalidTokenError,