fix iss claims for eseye 3.0 (#95)

* fix iss claims for seat 5 * allow old claim
eveseat · Nov 8, 2023 · e3495b5 · e3495b5
1 parent 3d2b777
commit e3495b5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/src/Checker/EsiTokenValidator.php b/src/Checker/EsiTokenValidator.php
@@ -3,7 +3,7 @@
 /*
  * This file is part of SeAT
  *
- * Copyright (C) 2015 to 2022 Leon Jacobs
+ * Copyright (C) 2015 to present Leon Jacobs
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
@@ -148,7 +148,8 @@ private function getJWTClaimsPolicy(string $client_id): ClaimCheckerManager
     {
         return new ClaimCheckerManager([
             new IssuerChecker([
-                Configuration::getInstance()->sso_host,
+                sprintf('%s://%s', Configuration::getInstance()->sso_scheme, Configuration::getInstance()->sso_host), // the currently used iss claim
+                Configuration::getInstance()->sso_host, // just to be sure, still allow the old claim without protocol
             ]),
             new ExpirationTimeChecker(),
             new AudienceChecker('EVE Online'),

diff --git a/tests/Fetchers/FetcherTest.php b/tests/Fetchers/FetcherTest.php
@@ -348,7 +348,7 @@ private function getJwsToken(JWK $jwk): string
             'name' => 'Warlof Tutsimo',
             'owner' => 'svnSjVa1uGYyp/ZL3mfkIwkJYzQ=',
             'exp'   => $time + 3600,
-            'iss' => 'login.eveonline.com',
+            'iss' => 'https://login.eveonline.com',
         ]);
 
         $builder = new JWSBuilder($manager);