fix: determine correct audience based on HELSINKI_PROFILE_API_URL

City-of-Helsinki · Jun 18, 2024 · e2e0046 · e2e0046
1 parent c8d47d9
commit e2e0046
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/backend/shared/shared/helsinki_profile/hp_client.py b/backend/shared/shared/helsinki_profile/hp_client.py
@@ -112,11 +112,21 @@ def get_api_access_token_tunnistus(self, oidc_access_token):
         """
         Exchanges OIDC access token for API access token using Tunnistus Keycloak
         """
+
+        if "test" in settings.HELSINKI_PROFILE_API_URL:
+            audience = "-test"
+        elif "stage" in settings.HELSINKI_PROFILE_API_URL:
+            audience = "-stage"
+        else:
+            audience = ""  # production
+
+        audience = settings.HELSINKI_PROFILE_API_URL
+
         try:
             response = requests.post(
                 settings.TUNNISTUS_API_TOKENS_ENDPOINT,
                 data={
-                    "audience": "profile-api-test",  # TODO: use setting
+                    "audience": f"profile-api{audience}",  # TODO: use setting
                     "grant_type": "urn:ietf:params:oauth:grant-type:uma-ticket",
                     "permission": "#access",
                 },