Mike Danese 057b7af798 serviceaccount: check token is issued by correct iss before verifying ...

Right now if a JWT for an unknown issuer, for any subject hits the
serviceaccount token authenticator, we return a errors as if the token
was meant for us but we couldn't find a key to verify it. We should
instead return nil, false, nil.

This change helps us support multiple service account token
authenticators with different issuers.

2018-01-24 20:21:59 -08:00

..

BUILD

…

main_test.go

…

service_account_test.go

serviceaccount: check token is issued by correct iss before verifying

2018-01-24 20:21:59 -08:00