LumeWeb
/
portal
1
0
Fork 0
Code Issues 5 Pull Requests Packages Projects Releases Wiki Activity

Revert "refactor: if the token doesn't match our purpose only error if EmptyAllowed is off" 

This reverts commit b1fcc7f7ae.
This commit is contained in:
Derrick Hammer 2024-03-20 13:55:35 -04:00
parent b1fcc7f7ae
commit bee80a9981
Signed by: pcfreak30
GPG Key ID: C997C339BE476FF2
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
api/middleware/middleware.go
View File

@ -129,9 +129,7 @@ func AuthMiddleware(options AuthMiddlewareOptions) func(http.Handler) http.Handl
aud, _ := claim.GetAudience() aud, _ := claim.GetAudience()
if options.Purpose != account.JWTPurposeNone && slices.Contains[jwt.ClaimStrings, string](aud, string(options.Purpose)) == false { if options.Purpose != account.JWTPurposeNone && slices.Contains[jwt.ClaimStrings, string](aud, string(options.Purpose)) == false {
if !options.EmptyAllowed { return account.ErrJWTInvalid
return account.ErrJWTInvalid
}
} }
return nil return nil