no need to verify issuer (#4294)

GoogleCloudPlatform · Jul 14, 2020 · f6a2981 · f6a2981
1 parent 7ce8406
commit f6a2981
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/appengine/standard_python3/pubsub/main.py b/appengine/standard_python3/pubsub/main.py
@@ -85,12 +85,6 @@ def receive_messages_handler():
         # case they would all share the same token for a limited time window.
         claim = id_token.verify_oauth2_token(token, requests.Request(),
                                              audience='example.com')
-        # Must also verify the `iss` claim.
-        if claim['iss'] not in [
-            'accounts.google.com',
-            'https://accounts.google.com'
-        ]:
-            raise ValueError('Wrong issuer.')
         CLAIMS.append(claim)
     except Exception as e:
         return 'Invalid token: {}\n'.format(e), 400