From f5e43c3c93b3f2770a7788cc65d48f1b11c2d5b5 Mon Sep 17 00:00:00 2001 From: Don Kendall Date: Sat, 18 Jan 2025 09:42:44 -0500 Subject: [PATCH] imp: handle payload_value of list --- auth_jwt/models/auth_jwt_validator.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/auth_jwt/models/auth_jwt_validator.py b/auth_jwt/models/auth_jwt_validator.py index 687e8e34a3..bcc47fea8b 100644 --- a/auth_jwt/models/auth_jwt_validator.py +++ b/auth_jwt/models/auth_jwt_validator.py @@ -226,7 +226,12 @@ def _decode(self, token, secret=None): ) if len((self.audience or "").split(",") or []) > 0: for key_value in (self.audience or "").split(","): - if key_value in (payload.get(payload_key) or "").split(" "): + payload_value = ( + payload.get(payload_key) + if isinstance(payload.get(payload_key), list) + else (payload.get(payload_key) or "").split(" ") + ) + if key_value in payload_value: return payload raise UnauthorizedInvalidToken() except Exception as e: