-
Fix Azure scope validation (#2269)
发布于
2025-10-26 15:41:22 +00:00 | 1563 次提交 在此版本后已推送到 main-
Update docs for required scopes
-
add scopes
-
Fix Azure scope validation
Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors.
Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override.
Closes #2263
下载附件
-