diff --git a/superset/security/manager.py b/superset/security/manager.py index 4b4d97ebbe6ea..ac494a1837827 100644 --- a/superset/security/manager.py +++ b/superset/security/manager.py @@ -1341,9 +1341,6 @@ def get_guest_user_from_request(self, req: Request) -> Optional[GuestUser]: return None try: - aud = ( - current_app.config["GUEST_TOKEN_JWT_AUDIENCE"] or get_url_host() - ) token = self.parse_jwt_guest_token(raw_token) if token.get("user") is None: raise ValueError("Guest token does not contain a user claim") @@ -1351,10 +1348,6 @@ def get_guest_user_from_request(self, req: Request) -> Optional[GuestUser]: raise ValueError("Guest token does not contain a resources claim") if token.get("rls_rules") is None: raise ValueError("Guest token does not contain an rls_rules claim") - if token.get("aud") is None: - raise ValueError("Guest token does not contain an aud claim") - if token.get("aud") != aud: - raise ValueError("Guest token does not match the aud claim") if token.get("type") != "guest": raise ValueError("This is not a guest token.") except Exception: # pylint: disable=broad-except