kaslo/synapse
1
0
Fork 0
Code Packages Releases 124 Wiki Activity

Fix lint which broke in #18374 (#18385)

Browse Source 
https://github.com/element-hq/synapse/pull/18374 did not pass linting
but was merged
This commit is contained in:
Quentin Gliech
2025-05-02 14:07:23 +02:00
committed by GitHub
parent fd5d3d852d
commit d18edf67d6
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
changelog.d/18385.misc Normal file
View File

@@ -0,0 +1 @@
Don't validate the `at_hash` (access token hash) field in OIDC ID Tokens if we don't end up actually using the OIDC Access Token.

2
synapse/handlers/oidc.py
View File

@@ -599,7 +599,7 @@ class OidcProvider:
# from the userinfo endpoint. Therefore we only have a single criteria
# to check right now but this may change in the future and this function
# should be updated if more usages are introduced.
#
#
# For example, if we start to use the access_token given to us by the
# IdP for more things, such as accessing Resource Server APIs.
return self._uses_userinfo