oauth2: Ignores JTI in userinfo

ory · May 24, 2018 · f592754 · f592754
1 parent 6d126d6
commit f592754
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/oauth2/handler.go b/oauth2/handler.go
@@ -229,6 +229,7 @@ func (h *Handler) UserinfoHandler(w http.ResponseWriter, r *http.Request, _ http
 	delete(interim, "iat")
 	delete(interim, "rat")
 	delete(interim, "exp")
+	delete(interim, "jti")
 
 	h.H.Write(w, r, interim)
 }