check additional audience claim in tokens
GitLab pipelines generate tokens meant to be consumed and verified by the authorizer. The new type of tokens the pipelines are using contains an additional audience claim we can verify
Bug: T337474
How to register an account on GitLab. To prevent spam, new accounts are locked until approved by an admin or the approver bot. You can also file an unlock request to expedite access.
Support: mw:GitLab, how to host a project on GitLab, #wikimedia-gitlab on libera.chat, #GitLab on Phabricator.
GitLab pipelines generate tokens meant to be consumed and verified by the authorizer. The new type of tokens the pipelines are using contains an additional audience claim we can verify
Bug: T337474