Dan Milne 17a464fd15 Fix OIDC claims validation against undefined scopes variable ...

The authorize action called validate_claims_against_scopes with
requested_scopes before that local was assigned (assignment was ~100
lines later), raising NameError whenever a client passed a claims=
parameter. Move the scope normalization above the claims validation.

Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>

2026-04-20 17:26:46 +10:00

49 KiB

Raw Blame History

View Raw