cim/zitadel-oidc
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(op): check if getTokenIDAndClaims succeeded (#429)

Browse source 
When getTokenIDAndClaims didn't succeed,
so `ok` would be false.
This was ignored and the accessTokenClaims.Claims call would panic.
This commit is contained in:
Tim Möhlmann 2023-08-18 18:54:58 +03:00 • committed by GitHub
parent 37b5de0e82
commit 4ed269979e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
pkg/op/token_exchange.go
View file

@ -282,6 +282,9 @@ func GetTokenIDAndSubjectFromToken(
case oidc.AccessTokenType: case oidc.AccessTokenType:
var accessTokenClaims *oidc.AccessTokenClaims var accessTokenClaims *oidc.AccessTokenClaims
tokenIDOrToken, subject, accessTokenClaims, ok = getTokenIDAndClaims(ctx, exchanger, token) tokenIDOrToken, subject, accessTokenClaims, ok = getTokenIDAndClaims(ctx, exchanger, token)
if !ok {
break
}
claims = accessTokenClaims.Claims claims = accessTokenClaims.Claims
case oidc.RefreshTokenType: case oidc.RefreshTokenType:
refreshTokenRequest, err := exchanger.Storage().TokenRequestByRefreshToken(ctx, token) refreshTokenRequest, err := exchanger.Storage().TokenRequestByRefreshToken(ctx, token)