optional id_token hash claims

thomasvargiu · thomasvargiu · commit fe7e092f90ad · 2024-04-27T11:47:19.000+02:00
diff --git a/src/IdTokenVerifier.php b/src/IdTokenVerifier.php
@@ -82,12 +82,10 @@ public function verify(string $jwt): array
         $alg = $header['alg'] ?? null;
 
         if (null !== $this->accessToken) {
-            $requiredClaims[] = 'at_hash';
             $validator = $validator->claim(new AtHashChecker($this->accessToken, $alg ?: ''));
         }
 
         if (null !== $this->code) {
-            $requiredClaims[] = 'c_hash';
             $validator = $validator->claim(new CHashChecker($this->code, $alg ?: ''));
         }
 

Original file line number	Diff line number	Diff line change
`@@ -82,12 +82,10 @@ public function verify(string $jwt): array`
`82`	`82`	`$alg = $header['alg'] ?? null;`
`83`	`83`
`84`	`84`	`if (null !== $this->accessToken) {`
`85`		`- $requiredClaims[] = 'at_hash';`
`86`	`85`	`$validator = $validator->claim(new AtHashChecker($this->accessToken, $alg ?: ''));`
`87`	`86`	`}`
`88`	`87`
`89`	`88`	`if (null !== $this->code) {`
`90`		`- $requiredClaims[] = 'c_hash';`
`91`	`89`	`$validator = $validator->claim(new CHashChecker($this->code, $alg ?: ''));`
`92`	`90`	`}`
`93`	`91`