Sicherhaven e0a491e8cb security: fix GoogleLoginView audience check + replace Clerk with direct GIS flow ...

- verify_oauth2_token now passes GOOGLE_CLIENT_ID as third arg (audience check)
- fail-closed: returns 503 if GOOGLE_CLIENT_ID env var is not set
- add GOOGLE_CLIENT_ID = os.environ.get('GOOGLE_CLIENT_ID', '') to settings
- replace ClerkLoginViewTests with GoogleLoginViewTests (4 cases)
- update requirements-docker.txt

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-10 01:31:18 +05:30

5.8 KiB

Raw Permalink Blame History

View Raw