Also accept 'xurrent' as JWT issuer if '4me' is configured

code4me · Jan 14, 2025 · e7b4d95 · e7b4d95
1 parent b5e3ea9
commit e7b4d95
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 2 deletions.
diff --git a/library/helpers/js_4me_helper.js b/library/helpers/js_4me_helper.js
@@ -98,12 +98,17 @@ class Js4meHelper {
   async get4meData(token) {
     const cryptoKeyObj = crypto.createPublicKey(this.certStr);
 
+    const iss = [this.issuer];
+    if (this.env4me.includes('4me')) {
+      iss.push(`https://${this.account}.${this.env4me.replace('4me', 'xurrent')}`);
+    }
+
     try {
       const {payload, protectedHeader} = await jwtVerify(
         token,
         cryptoKeyObj,
         {
-          issuer: this.issuer,
+          issuer: iss,
           algorithms: [this.algorithm],
           audience: this.audience,
         }

diff --git a/library/helpers/tests/js_4me_helper_jwt_verification.test.js b/library/helpers/tests/js_4me_helper_jwt_verification.test.js