barbercollie/tinyauth
1
0
Fork 1
mirror of https://github.com/steveiliop56/tinyauth.git synced 2026-04-17 03:06:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: revoke access token on duplicate auth code user (#786)

Browse Source 
* fix: revoke access token on duplicate auth code user

* fix: review comments

* tests: fix tests
This commit is contained in:
Stavros
2026-04-14 12:45:27 +03:00
committed by GitHub
parent 578172d01e
commit 6f99e7acff
9 changed files with 113 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
internal/controller/oidc_controller.go
View File

@@ -275,6 +275,9 @@ func (controller *OIDCController) Token(c *gin.Context) {
case "authorization_code":
entry, err := controller.oidc.GetCodeEntry(c, controller.oidc.Hash(req.Code), client.ClientID)
if err != nil {
if err := controller.oidc.DeleteTokenByCodeHash(c, controller.oidc.Hash(req.Code)); err != nil {
tlog.App.Error().Err(err).Msg("Failed to delete access token by code hash")
}
if errors.Is(err, service.ErrCodeNotFound) {
tlog.App.Warn().Msg("Code not found")
c.JSON(400, gin.H{