cim/zitadel-oidc
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

improve ValidateAuthReqScopes

Browse source
This commit is contained in:
Livio Amstutz 2020-10-15 14:02:53 +02:00
parent ed33332dce
commit 5cc884766e
1 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

26
pkg/op/authrequest.go
View file

@ -111,20 +111,20 @@ func ValidateAuthReqScopes(client Client, scopes []string) ([]string, error) {
} }
openID := false openID := false
for i := len(scopes) - 1; i >= 0; i-- { for i := len(scopes) - 1; i >= 0; i-- {
switch scopes[i] { scope := scopes[i]
case oidc.ScopeOpenID: if scope == oidc.ScopeOpenID {
openID = true openID = true
case oidc.ScopeProfile, continue
oidc.ScopeEmail, }
oidc.ScopePhone, if !(scope == oidc.ScopeProfile ||
oidc.ScopeAddress, scope == oidc.ScopeEmail ||
oidc.ScopeOfflineAccess: scope == oidc.ScopePhone ||
default: scope == oidc.ScopeAddress ||
if !utils.Contains(client.AllowedScopes(), scopes[i]) { scope == oidc.ScopeOfflineAccess) &&
scopes[i] = scopes[len(scopes)-1] !utils.Contains(client.AllowedScopes(), scope) {
scopes[len(scopes)-1] = "" scopes[i] = scopes[len(scopes)-1]
scopes = scopes[:len(scopes)-1] scopes[len(scopes)-1] = ""
} scopes = scopes[:len(scopes)-1]
} }
} }
if !openID { if !openID {