workspaces: ensure validation of JWT's sub and exp (#4694)

Signed-off-by: Francesco Ilario <filario@redhat.com>
redhat-appstudio · Oct 14, 2024 · bc52efc · bc52efc
1 parent c6ac9f3
commit bc52efc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/components/workspaces/base/server/config/server/proxy-config/dynamic/config.yaml b/components/workspaces/base/server/config/server/proxy-config/dynamic/config.yaml
@@ -25,6 +25,9 @@ http:
     jwt-authorizer:
       plugin:
         jwt:
+          payloadFields:
+          - sub
+          - exp
           required: true
           keys: []
           jwtHeaders: