diff --git a/tools/create_sitting_approvals.py b/tools/create_sitting_approvals.py index 3165732..f61d6a4 100644 --- a/tools/create_sitting_approvals.py +++ b/tools/create_sitting_approvals.py @@ -156,7 +156,7 @@ def main() -> int: try: _create(rows, origin.rstrip("/"), receipt) except Exception as error: - receipt["failure"] = str(error) if isinstance(error, Refused) else "contained_operation_failed" + receipt["failure"] = str(error) if isinstance(error, Refused) else "contained_operation_failed:" + type(error).__name__ print(receipt["failure"], file=sys.stderr) return 2 finally: @@ -236,6 +236,7 @@ def _create(rows, origin, receipt): algorithms=["RS256"], issuer=ISSUER, audience="approval-engine", + leeway=30, options={"strict_aud": True, "require": ["sub", "iat", "exp", "iss", "aud"]}, ) roles = claims.get("roles")