fix: set valid audience

closes #388
Aguafrommars · Mar 25, 2021 · 86191d7 · 86191d7 · ben-jacobs · Mar 25, 2021
1 parent 797aa6c
commit 86191d7
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/Aguacongas.TheIdServer/Startup.cs b/src/Aguacongas.TheIdServer/Startup.cs
@@ -322,8 +322,8 @@ private void ConfigureIdentityServerAuthenticationOptions(JwtBearerOptions optio
                     ServerCertificateCustomValidationCallback = (message, cert, chain, policy) => true
 #pragma warning restore S4830 // Server certificates should be verified during SSL/TLS connections
                 };
-            }                
-
+            }
+            options.Audience = Configuration["ApiAuthentication:ApiName"];
             options.Events = new JwtBearerEvents
             {
                 OnMessageReceived = context =>
@@ -344,6 +344,7 @@ private void ConfigureIdentityServerAuthenticationOptions(JwtBearerOptions optio
                             .GetRequiredService<IRetrieveOneTimeToken>()
                             .GetOneTimeToken(oneTimeToken);
                     }
+                    context.Token = TokenRetrieval.FromAuthorizationHeader()(request);
                     return Task.CompletedTask;
                 }
             };