From f207ce64f8e1b88df290ea6f84bc291c50e8aaba Mon Sep 17 00:00:00 2001 From: "Jens L." Date: Tue, 10 Sep 2024 19:32:01 +0200 Subject: [PATCH] enterprise: show specific error if Install ID is invalid in license (#11317) Signed-off-by: Jens Langhammer --- authentik/enterprise/license.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/authentik/enterprise/license.py b/authentik/enterprise/license.py index 8ef3b4df60..1bc92bdf5c 100644 --- a/authentik/enterprise/license.py +++ b/authentik/enterprise/license.py @@ -121,6 +121,9 @@ class LicenseKey: ), ) except PyJWTError: + unverified = decode(jwt, options={"verify_signature": False}) + if unverified["aud"] != get_license_aud(): + raise ValidationError("Invalid Install ID in license") from None raise ValidationError("Unable to verify license") from None return body