ElyBy-Mirror/oauth2-server
1
0
Fork 0
mirror of https://github.com/elyby/oauth2-server.git synced 2024-12-25 14:40:00 +05:30
Code Issues Packages Projects Releases Wiki Activity

Fix uncaught exception produced by unsigned token

Browse Source
This commit is contained in:
Martin Dzibela 2018-05-22 14:13:20 +02:00
parent 2e47fa7fca
commit 9941a96feb
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/AuthorizationValidators/BearerTokenValidator.php
View File

@ -65,8 +65,12 @@ class BearerTokenValidator implements AuthorizationValidatorInterface
try { try {
// Attempt to parse and validate the JWT // Attempt to parse and validate the JWT
$token = (new Parser())->parse($jwt); $token = (new Parser())->parse($jwt);
if ($token->verify(new Sha256(), $this->publicKey->getKeyPath()) === false) { try {
throw OAuthServerException::accessDenied('Access token could not be verified'); if ($token->verify(new Sha256(), $this->publicKey->getKeyPath()) === false) {
throw OAuthServerException::accessDenied('Access token could not be verified');
}
} catch (\BadMethodCallException $exception) {
throw OAuthServerException::accessDenied('Access token is not signed');
} }
// Ensure access token hasn't expired // Ensure access token hasn't expired