From 02725b059603a31e8ccef177986002edc7954e7c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Szak=C3=A1ts=20Alp=C3=A1r=20Zsolt?= <szakatsa@gmail.com>
Date: Sat, 16 Aug 2025 23:53:01 +0200
Subject: [PATCH] Add validissuer

---
 Source/ProofOfConcept/Program.cs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Source/ProofOfConcept/Program.cs b/Source/ProofOfConcept/Program.cs
index 7c6d63e..7412f40 100644
--- a/Source/ProofOfConcept/Program.cs
+++ b/Source/ProofOfConcept/Program.cs
@@ -109,6 +109,9 @@ builder.Services
         o.AdditionalAuthorizationParameters.Add("show_keypair_step", "true");
         o.AdditionalAuthorizationParameters.Add("prompt_missing_scopes", "true");
 
+        o.TokenValidationParameters.ValidateIssuer = true;
+        o.TokenValidationParameters.ValidIssuer = o.Authority;
+        
         // ✅ Add the Fleet API audience to the token POST
         const string FleetApiAudience = "https://fleet-api.prd.eu.vn.cloud.tesla.com"; // set your region base
         o.Events = new OpenIdConnectEvents