Skip to content

OIDC Aud contains multiple values not just one #5498

Description

@miranyx

Attempted Debugging

  • I have read the debugging page

Searched GitHub Issues

  • I have searched GitHub for the issue.

Describe the Scenario

I tried to add oidc to my bookstack instance, the sso service is zitadel self-hosted, with multiple organizations. The user has through that multiple aud entries in the aud key, via jwt.
I acctivated the sso dump feature this is the output:

{
  "iss": "https://sso.my.domain",
  "sub": "264809623519887363",
  "aud": [
    "283445348708450307",
    "269086577370660867@project",
    "306939337713451011",
    "308117379076915203",
    "269084476393390083"
  ],
  "exp": 1740192028,
  "iat": 1740148828,
  "auth_time": 1740148228,
  "amr": [
    "user",
    "mfa"
  ],
  "azp": "308117379076915203",
  "client_id": "308117379076915203",
  "at_hash": "at_hash",
  "sid": "V1_307981558940172291",
  "name": "FULL NAME",
  "given_name": "GIVEN NAME",
  "family_name": "FAMILY NAME",
  "locale": "en",
  "updated_at": 1714334837,
  "preferred_username": "USERNAME",
  "email": "email@my.domain",
  "email_verified": true
}

The error I am getting is:

ID token validation failed with error: Token audience value has 5 values, Expected 1 

Exact BookStack Version

v24.12.1

Log Content

No response

Hosting Environment

Docker Compose with the linuxserver.io images.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions