1.1 --- a/app/main/oauth2/token.lua	Tue Jun 01 14:24:03 2021 +0200
     1.2 +++ b/app/main/oauth2/token.lua	Mon Jun 07 20:58:31 2021 +0200
     1.3 @@ -62,6 +62,9 @@
     1.4      if cert_distinguished_name then
     1.5        cert_common_name = string.match(cert_distinguished_name, "%f[^/\0]CN=([A-Za-z0-9_.-]+)%f[/\0]")
     1.6        if not cert_common_name then
     1.7 +        cert_common_name = string.match(cert_distinguished_name, "^CN=([A-Za-z0-9_.-]+)")
     1.8 +      end
     1.9 +      if not cert_common_name then
    1.10          return error_result("invalid_client", "CN in X.509 certificate invalid")
    1.11        end
    1.12      else