@@ -117,9 +117,7 @@ def is_used(self, jti: str) -> bool:
117117 def _cleanup (self ) -> None :
118118 """Remove expired entries."""
119119 now = time .time ()
120- self ._used_jtis = {
121- jti : timestamp for jti , timestamp in self ._used_jtis .items () if now - timestamp < self ._ttl
122- }
120+ self ._used_jtis = {jti : timestamp for jti , timestamp in self ._used_jtis .items () if now - timestamp < self ._ttl }
123121
124122
125123# ============================================================================
@@ -205,22 +203,18 @@ def validate_id_jag(
205203 # Step 5: Validate audience
206204 if claims .get ("aud" ) != self .config .server_auth_issuer :
207205 raise ValueError (
208- f"Invalid audience: expected '{ self .config .server_auth_issuer } ', "
209- f"got '{ claims .get ('aud' )} '"
206+ f"Invalid audience: expected '{ self .config .server_auth_issuer } ', got '{ claims .get ('aud' )} '"
210207 )
211208
212209 # Step 6: Validate resource
213210 if claims .get ("resource" ) != self .config .server_resource_id :
214211 raise ValueError (
215- f"Invalid resource: expected '{ self .config .server_resource_id } ', "
216- f"got '{ claims .get ('resource' )} '"
212+ f"Invalid resource: expected '{ self .config .server_resource_id } ', got '{ claims .get ('resource' )} '"
217213 )
218214
219215 # Step 7: Validate client_id
220216 if claims .get ("client_id" ) != expected_client_id :
221- raise ValueError (
222- f"client_id mismatch: expected '{ expected_client_id } ', " f"got '{ claims .get ('client_id' )} '"
223- )
217+ raise ValueError (f"client_id mismatch: expected '{ expected_client_id } ', got '{ claims .get ('client_id' )} '" )
224218
225219 # Step 8: Check for replay (if enabled)
226220 jti = claims .get ("jti" )
0 commit comments