Fix audience validation

PostHog · Jun 10, 2024 · 69a3858 · 69a3858
1 parent 875ce72
commit 69a3858
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/jwt.go b/jwt.go
@@ -40,10 +40,10 @@ func decodeAuthToken(authHeader string) (jwt.MapClaims, error) {
 
 	// Check if the token is valid and return the claims.
 	if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
-		// Validate scope
-		tokenScope := fmt.Sprint(claims["scope"])
+		// Validate audience
+		tokenScope := fmt.Sprint(claims["aud"])
 		if tokenScope != ExpectedScope {
-			return nil, fmt.Errorf("invalid scope")
+			return nil, fmt.Errorf("invalid audience")
 		}
 		return claims, nil
 	} else {