Merge pull request #206 from trail-of-forks/ww/update-oidc-endpoint

This patch updates the PyPI API minting endpoint used uding the OIDC exchange process.
This commit is contained in:
Sviatoslav Sydorenko (Святослав Сидоренко) 2024-02-05 17:59:15 +01:00 committed by GitHub
commit e080e0073c
WARNING! Although there is a key with this ID in the database it does not verify this commit! This commit is SUSPICIOUS.
GPG key ID: B5690EEEBB952194

View file

@ -164,7 +164,7 @@ def render_claims(token: str) -> str:
repository_url = get_normalized_input("repository-url")
repository_domain = urlparse(repository_url).netloc
token_exchange_url = f"https://{repository_domain}/_/oidc/github/mint-token"
token_exchange_url = f"https://{repository_domain}/_/oidc/mint-token"
# Indices are expected to support `https://{domain}/_/oidc/audience`,
# which tells OIDC exchange clients which audience to use.