From 69c6c0ba1d685e1078c19e995bf4a0a16018945e Mon Sep 17 00:00:00 2001 From: Stavros Date: Wed, 4 Mar 2026 19:38:52 +0200 Subject: [PATCH] fix: add cache control header to token response --- internal/controller/oidc_controller.go | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/internal/controller/oidc_controller.go b/internal/controller/oidc_controller.go index a6d3cdd..1920c87 100644 --- a/internal/controller/oidc_controller.go +++ b/internal/controller/oidc_controller.go @@ -231,7 +231,7 @@ func (controller *OIDCController) Token(c *gin.Context) { if !ok { tlog.App.Error().Msg("Missing authorization header") c.Header("www-authenticate", "basic") - c.JSON(401, gin.H{ + c.JSON(400, gin.H{ "error": "invalid_client", }) return @@ -313,7 +313,7 @@ func (controller *OIDCController) Token(c *gin.Context) { if err != nil { if errors.Is(err, service.ErrTokenExpired) { tlog.App.Error().Err(err).Msg("Refresh token expired") - c.JSON(401, gin.H{ + c.JSON(400, gin.H{ "error": "invalid_grant", }) return @@ -321,7 +321,7 @@ func (controller *OIDCController) Token(c *gin.Context) { if errors.Is(err, service.ErrInvalidClient) { tlog.App.Error().Err(err).Msg("Invalid client") - c.JSON(401, gin.H{ + c.JSON(400, gin.H{ "error": "invalid_grant", }) return @@ -337,6 +337,9 @@ func (controller *OIDCController) Token(c *gin.Context) { tokenResponse = tokenRes } + c.Header("cache-control", "no-store") + c.Header("pragma", "no-cache") + c.JSON(200, tokenResponse) }