diff --git a/src/Access/TokenProcessors.h b/src/Access/TokenProcessors.h index c898bfff15d4..c30b5e713236 100644 --- a/src/Access/TokenProcessors.h +++ b/src/Access/TokenProcessors.h @@ -213,9 +213,6 @@ class OpenIdTokenProcessor : public ITokenProcessor bool resolveAndValidate(TokenCredentials & credentials) const override; private: - const String expected_issuer; - const String expected_audience; - const bool allow_no_expiration; Poco::URI userinfo_endpoint; Poco::URI token_introspection_endpoint; diff --git a/src/Access/TokenProcessorsOpaque.cpp b/src/Access/TokenProcessorsOpaque.cpp index 6a8ced064c96..7de06f0571ea 100644 --- a/src/Access/TokenProcessorsOpaque.cpp +++ b/src/Access/TokenProcessorsOpaque.cpp @@ -265,8 +265,6 @@ OpenIdTokenProcessor::OpenIdTokenProcessor(const String & processor_name_, const String & jwks_uri_, UInt64 jwks_cache_lifetime_) : ITokenProcessor(processor_name_, token_cache_lifetime_, username_claim_, groups_claim_), - expected_issuer(expected_issuer_), expected_audience(expected_audience_), - allow_no_expiration(allow_no_expiration_), userinfo_endpoint(userinfo_endpoint_), token_introspection_endpoint(token_introspection_endpoint_) { if (!jwks_uri_.empty()) @@ -296,9 +294,7 @@ OpenIdTokenProcessor::OpenIdTokenProcessor(const String & processor_name_, const String & openid_config_endpoint_, UInt64 verifier_leeway_, UInt64 jwks_cache_lifetime_) - : ITokenProcessor(processor_name_, token_cache_lifetime_, username_claim_, groups_claim_), - expected_issuer(expected_issuer_), expected_audience(expected_audience_), - allow_no_expiration(allow_no_expiration_) + : ITokenProcessor(processor_name_, token_cache_lifetime_, username_claim_, groups_claim_) { const picojson::object openid_config = getObjectFromURI(Poco::URI(openid_config_endpoint_));