Fixes couchbase#2055 Functional test failing: Test Openidconnect Negative Token Expiry (couchbase#2056)

tleyden · web-flow · commit f18e83359777 · 2016-08-29T14:43:13.000-07:00
diff --git a/auth/auth.go b/auth/auth.go
@@ -338,7 +338,9 @@ func (auth *Authenticator) AuthenticateTrustedJWT(token string, provider *OIDCPr
 	}
 
 	// Verify claims - ensures that the token we received from the provider is valid for Sync Gateway
-	oidc.VerifyClaims(jwt, provider.Issuer, *provider.ClientID)
+	if err := oidc.VerifyClaims(jwt, provider.Issuer, *provider.ClientID); err != nil {
+		return nil, jose.JWT{}, err
+	}
 	return auth.authenticateJWT(jwt, provider)
 }
 

Original file line number	Diff line number	Diff line change
`@@ -338,7 +338,9 @@ func (auth Authenticator) AuthenticateTrustedJWT(token string, provider OIDCPr`
`338`	`338`	`}`
`339`	`339`
`340`	`340`	`// Verify claims - ensures that the token we received from the provider is valid for Sync Gateway`
`341`		`- oidc.VerifyClaims(jwt, provider.Issuer, *provider.ClientID)`
	`341`	`+ if err := oidc.VerifyClaims(jwt, provider.Issuer, *provider.ClientID); err != nil {`
	`342`	`+ return nil, jose.JWT{}, err`
	`343`	`+ }`
`342`	`344`	`return auth.authenticateJWT(jwt, provider)`
`343`	`345`	`}`
`344`	`346`