add new acr token validation (#245)

navikt · Aug 4, 2023 · 8c59507 · 8c59507
1 parent 79380ed
commit 8c59507
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/server/auth/idporten/verifyIdportenToken.ts b/src/server/auth/idporten/verifyIdportenToken.ts
@@ -38,8 +38,11 @@ export async function validateToken(bearerToken: string): Promise<boolean> {
     return false;
   }
 
-  if (verified.payload.acr !== "Level4") {
-    logger.warn("token does not have acr Level4");
+  if (
+    verified.payload.acr !== "Level4" &&
+    verified.payload.acr !== "idporten-loa-high"
+  ) {
+    logger.warn("token does not have acr Level4 or idporten-loa-high");
     return false;
   }