Merge pull request #18 from uc-cdis/fix/validate

fix(validate): fix issuers check in require auth
uc-cdis · May 2, 2018 · 52ab0df · 52ab0df
2 parents 079981a + f03b887
commit 52ab0df
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/authutils/token/validate.py b/authutils/token/validate.py
@@ -163,11 +163,10 @@ def validate_jwt(
     """
     if not issuers:
         issuers = []
-        issuers.append(
-            flask.current_app.config.get('OIDC_ISSUER')
-            or flask.current_app.config.get('USER_API')
-            or flask.current_app.config.get('BASE_URL')
-        )
+        for config_var in ['OIDC_ISSUER', 'USER_API', 'BASE_URL']:
+            value = flask.current_app.config.get(config_var)
+            if value:
+                issuers.append(value)
     if public_key is None:
         public_key = get_public_key_for_token(
             encoded_token,