Adding issuer (GoogleCloudPlatform#2266)

Abby Carey · gguuss · commit 210b7b23369d · 2019-07-19T09:54:59.000-07:00
* Adding issuer
* Update make_iap_request.py
diff --git a/iap/make_iap_request.py b/iap/make_iap_request.py
@@ -48,7 +48,7 @@ def make_iap_request(url, client_id, method='GET', **kwargs):
     # Set the default timeout, if missing
     if 'timeout' not in kwargs:
         kwargs['timeout'] = 90
-        
+
     # Figure out what environment we're running in and get some preliminary
     # information about the service account.
     bootstrap_credentials, _ = google.auth.default(
diff --git a/iap/validate_jwt.py b/iap/validate_jwt.py
@@ -77,6 +77,7 @@ def _validate_iap_jwt(iap_jwt, expected_audience):
         decoded_jwt = jwt.decode(
             iap_jwt, key,
             algorithms=['ES256'],
+            issuer='https://cloud.google.com/iap',
             audience=expected_audience)
         return (decoded_jwt['sub'], decoded_jwt['email'], '')
     except (jwt.exceptions.InvalidTokenError,
