fix(aud): Update validate_request calls

uc-cdis · Feb 16, 2021 · 2b5aa17 · 2b5aa17
1 parent ec60cb0
commit 2b5aa17
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/fence/blueprints/data/indexd.py b/fence/blueprints/data/indexd.py
@@ -963,7 +963,9 @@ def _get_user_info():
     populated information about an anonymous user.
     """
     try:
-        set_current_token(validate_request(scope={"user"}))
+        set_current_token(
+            validate_request(scope={"user"}, audience=config.get("BASE_URL"))
+        )
         user_id = str(current_token["sub"])
         username = current_token["context"]["user"]["name"]
     except JWTError:

diff --git a/fence/blueprints/link.py b/fence/blueprints/link.py
@@ -274,7 +274,9 @@ def get(self):
             # if we're mocking google auth, mock response to include the email
             # from the provided access token
             try:
-                token = validate_request({"user"})
+                token = validate_request(
+                    scope={"user"}, audience=config.get("BASE_URL")
+                )
                 email = get_user_from_claims(token).username
             except Exception as exc:
                 logger.info(