diff --git a/changelog/27500.txt b/changelog/27500.txt new file mode 100644 index 000000000000..682ba7b03370 --- /dev/null +++ b/changelog/27500.txt @@ -0,0 +1,3 @@ +```release-note:change +auth/jwt: Revert [GH-295](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/295) which changed the way JWT `aud` claims were validated. +``` diff --git a/go.mod b/go.mod index 9b5251cbc131..6e8e10cd640a 100644 --- a/go.mod +++ b/go.mod @@ -136,7 +136,7 @@ require ( github.com/hashicorp/vault-plugin-auth-centrify v0.15.1 github.com/hashicorp/vault-plugin-auth-cf v0.16.0 github.com/hashicorp/vault-plugin-auth-gcp v0.16.2 - github.com/hashicorp/vault-plugin-auth-jwt v0.20.3 + github.com/hashicorp/vault-plugin-auth-jwt v0.20.4 github.com/hashicorp/vault-plugin-auth-kerberos v0.11.0 github.com/hashicorp/vault-plugin-auth-kubernetes v0.18.0 github.com/hashicorp/vault-plugin-auth-oci v0.15.1 diff --git a/go.sum b/go.sum index 38754fbd726f..76e53ed61452 100644 --- a/go.sum +++ b/go.sum @@ -2527,8 +2527,8 @@ github.com/hashicorp/vault-plugin-auth-cf v0.16.0 h1:t4+0LY6002NQvY6c0c43ikZjxqR github.com/hashicorp/vault-plugin-auth-cf v0.16.0/go.mod h1:q+Lt3FhtFlP+pulKSjrbnR8ecu4vY9TlgPvs+nnBey8= github.com/hashicorp/vault-plugin-auth-gcp v0.16.2 h1:HC1PpXxGNzfu7IUfN7Ok7dIMV29R8a/2EJ5uDnrpxz0= github.com/hashicorp/vault-plugin-auth-gcp v0.16.2/go.mod h1:8FWNvFElzQBWJGCZ3SBPqsSc/x9bge9Et+JuwVLlJPM= -github.com/hashicorp/vault-plugin-auth-jwt v0.20.3 h1:mLsdorH4m43rBqybHDZKl33rrmc80ens4hSB6E7i9o0= -github.com/hashicorp/vault-plugin-auth-jwt v0.20.3/go.mod h1:1IQjNAZ2z8GdTPM/XizC6eA4X9brnOXiwSoYEOfuDlM= +github.com/hashicorp/vault-plugin-auth-jwt v0.20.4 h1:8C2xOiK6EZAv6ZmM9fsPFJjph912B2CjA5o2w2ZsdiM= +github.com/hashicorp/vault-plugin-auth-jwt v0.20.4/go.mod h1:1IQjNAZ2z8GdTPM/XizC6eA4X9brnOXiwSoYEOfuDlM= github.com/hashicorp/vault-plugin-auth-kerberos v0.11.0 h1:XjdH8nqosqgKeAwBptMS7DoXsdi8IKL2fbBSyvL/HRM= github.com/hashicorp/vault-plugin-auth-kerberos v0.11.0/go.mod h1:xupzh9O6Us6bqKLZ6wfRsjqlf1Mb1TRylKpxZPJd5rA= github.com/hashicorp/vault-plugin-auth-kubernetes v0.18.0 h1:mGVVdcTI55t/NrMefkLjnenAVunJiQZg5o0opuU7ixw=