Include arp in global audience validator (should be temporary!!)

department-of-veterans-affairs · Apr 24, 2024 · 0ee65dc · 0ee65dc
1 parent cf091b5
commit 0ee65dc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/concerns/authentication_and_sso_concerns.rb b/app/controllers/concerns/authentication_and_sso_concerns.rb
@@ -11,7 +11,7 @@ module AuthenticationAndSSOConcerns # rubocop:disable Metrics/ModuleLength
   included do
     before_action :authenticate, :set_session_expiration_header
 
-    validates_access_token_audience [Settings.sign_in.vaweb_client_id, ('vamock' if MockedAuthentication.mockable_env?)]
+    validates_access_token_audience [Settings.sign_in.vaweb_client_id, ('vamock' if MockedAuthentication.mockable_env?), Settings.sign_in.arp_client_id]
   end
 
   protected