Skip to main content

parse_audiences_env

ati::core::jwt

Function parse_audiences_env 

Source 
pub fn parse_audiences_env() -> Vec<String>
Expand description

Resolve the accepted-audience allowlist from environment.

Priority (first source wins):

  1. ATI_JWT_ACCEPTED_AUDIENCES (CSV) — operator declares an allowlist, e.g. "ati-proxy,parcha-custom-tools". Used when the proxy accepts multiple aud values for per-provider audience separation (#121).
  2. ATI_JWT_AUDIENCE (singular) — back-compat with v0.7.x single-aud deployments; wrapped in a one-element vec.
  3. Default: ["ati-proxy"] — preserves v0.7.x behaviour when nothing is set.

Empty/whitespace-only CSV entries are dropped. An empty list falls through to the singular env / default rather than producing Vec::new() (which validate() would interpret as “accept any aud”).