diff --git a/physionet-django/physionet/settings/base.py b/physionet-django/physionet/settings/base.py index 7f02dc5f0..d86e01fea 100644 --- a/physionet-django/physionet/settings/base.py +++ b/physionet-django/physionet/settings/base.py @@ -288,6 +288,7 @@ ORCID_CLIENT_SECRET = config('ORCID_CLIENT_SECRET', default=False) ORCID_SCOPE = config('ORCID_SCOPE', default=False) ORCID_LOGIN_ENABLED = "openid" in ORCID_SCOPE +ORCID_OPEN_ID_JWKS_URL = config('ORCID_OPEN_ID_JWKS_URL', default=False) # Tags for the CITISOAPService API CITI_USERNAME = config('CITI_USERNAME', default='') diff --git a/physionet-django/user/validators.py b/physionet-django/user/validators.py index 564095b94..2c306243b 100644 --- a/physionet-django/user/validators.py +++ b/physionet-django/user/validators.py @@ -225,7 +225,7 @@ def validate_orcid_id_token(token): access_token and signed id_token, this function validates id_token signature """ - jwks_url = "https://sandbox.orcid.org/oauth/jwks" # ORCID Sandbox JWKS URL + jwks_url = settings.ORCID_OPEN_ID_JWKS_URL jwks = requests.get(jwks_url).json() headers = jwt.get_unverified_header(token)