Audience has to match

The audience is the client-id
2024-02-14 23:02:25 -08:00
parent 424c5df004
commit 5d78ce3ec9
1 changed files with 1 additions and 0 deletions
--- a/matrix-module.nix
+++ b/matrix-module.nix
@@ -130,6 +130,7 @@ in {
            enabled = true;
            algorithm = "RS256";
            secret = cfg.openid.jwt-secret;
+            audiences = [ cfg.openid.client-id ];
          };
          listeners = [{
            port = cfg.port;