发布

  • Fix Azure scope validation (#2269)

    frostbyte_neo 发布于 2025-10-26 15:41:22 +00:00 | 1563 次提交 在此版本后已推送到 main

    • Update docs for required scopes

    • add scopes

    • Fix Azure scope validation

    Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors.

    Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override.

    Closes #2263

    下载附件