enhance: audience validation

go-vela · May 30, 2024 · 3f46a1b · 3f46a1b
1 parent 169b103
commit 3f46a1b
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/api/build/id_token.go b/api/build/id_token.go
@@ -105,7 +105,13 @@ func GetIDToken(c *gin.Context) {
 
 	// if audience is provided, include that in claims
 	if len(c.QueryArray("audience")) > 0 {
-		idmto.Audience = c.QueryArray("audience")
+		audience := []string{}
+		for _, a := range c.QueryArray("audience") {
+			if len(a) > 0 {
+				audience = append(audience, util.Sanitize(a))
+			}
+		}
+		idmto.Audience = audience
 	}
 
 	// mint token