Two bug fixes

2025-12-01 19:54:47 +11:00
parent 54d9c3a0d9
commit f0ad3b2c90
2 changed files with 3 additions and 3 deletions
--- a/app/controllers/oidc_auth_controller.rb
+++ b/app/controllers/oidc_auth_controller.rb
@@ -175,7 +175,7 @@ class OidcAuthController < ApplicationController
  # JWT claim extraction and validation
  def extract_claims_from_id_token(id_token)
    # Decode JWT without verification first to get claims
-    decoded_jwt = JWT.decode(id_token, nil, false).first
+    decoded_jwt = JSON::JWT.decode(id_token, :skip_verification)

    {
      sub: decoded_jwt['sub'],