check additional audience claim in tokens (!10) · Merge requests · repos / releng / jwt-authorizer

Closed Jaime Nuche requested to merge jwt-audience into main May 30, 2023

GitLab pipelines generate tokens meant to be consumed and verified by the authorizer. The new type of tokens the pipelines are using contains an additional audience claim we can verify

Bug: T337474