Skip to content

Conversation

Lutonite
Copy link
Contributor

Nimbus processed the JWT claims set to convert the "well-known" values to more appropriate formats, causing the introspection mapping to always return null for the expiration time, issue time, and not before time as the cast to Long could never succeed.

I've also noticed that while the audience is not strictly required to be an array, the claims map it as such either way, so I've adjusted the type for this as well.

@Lutonite Lutonite requested a review from a team as a code owner August 10, 2025 14:30
@Lutonite Lutonite force-pushed the fix/introspect-date branch from 307d8f2 to 89629b8 Compare August 10, 2025 14:32
@github-actions github-actions bot added the stale label Aug 26, 2025
@Lutonite
Copy link
Contributor Author

not stale

@github-actions github-actions bot added renewed and removed stale labels Sep 1, 2025
@tronghn
Copy link
Contributor

tronghn commented Sep 5, 2025

Thanks for the contribution! The change to the aud field in IntrospectResponse is a breaking change, but I've added a serialization option to minimize breaking behaviour for single-valued audiences when invoking the introspection endpoint.

@tronghn tronghn merged commit 61e09e1 into navikt:master Sep 5, 2025
@Lutonite Lutonite deleted the fix/introspect-date branch September 5, 2025 15:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants