fix(op): check if getTokenIDAndClaims succeeded (#429)

When getTokenIDAndClaims didn't succeed,
so `ok` would be false.
This was ignored and the accessTokenClaims.Claims call would panic.
This commit is contained in:
Tim Möhlmann 2023-08-18 18:54:58 +03:00 committed by GitHub
parent 37b5de0e82
commit 4ed269979e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -282,6 +282,9 @@ func GetTokenIDAndSubjectFromToken(
case oidc.AccessTokenType:
var accessTokenClaims *oidc.AccessTokenClaims
tokenIDOrToken, subject, accessTokenClaims, ok = getTokenIDAndClaims(ctx, exchanger, token)
if !ok {
break
}
claims = accessTokenClaims.Claims
case oidc.RefreshTokenType:
refreshTokenRequest, err := exchanger.Storage().TokenRequestByRefreshToken(ctx, token)