You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
The key has expired.
2.7.2
[java-security]
Audience Validation accepts tokens of grant type user_token that does not provide aud claim. In that case JwtAudienceValidator derives the audiences from the scopes.
❗ IMPORTANT Update
Use getSubaccountId() only to fetch the subaccount id, e.g. for calling the metering API for user-based pricing.
In case you are interested in the customers tenant GUID make use of getZoneId() instead!
In upcoming releases (2009B) - especially for new subaccounts - subaccount id will no longer match the tenant GUID which is provided via the xsuaa access token as zid claim or via the ias oidc token as zone_uuid claim.