diff --git a/authentik/enterprise/license.py b/authentik/enterprise/license.py index 8ef3b4df60..1bc92bdf5c 100644 --- a/authentik/enterprise/license.py +++ b/authentik/enterprise/license.py @@ -121,6 +121,9 @@ class LicenseKey: ), ) except PyJWTError: + unverified = decode(jwt, options={"verify_signature": False}) + if unverified["aud"] != get_license_aud(): + raise ValidationError("Invalid Install ID in license") from None raise ValidationError("Unable to verify license") from None return body