Merge pull request #286 from Pjort/main

lakhansamani · web-flow · commit bbc6394cf3aa · 2022-11-03T20:10:40.000+05:30
fixed validation of refresh token
diff --git a/server/handlers/token.go b/server/handlers/token.go
@@ -154,6 +154,7 @@ func TokenHandler() gin.HandlerFunc {
 					"error":             "invalid_refresh_token",
 					"error_description": "The refresh token is invalid",
 				})
+				return
 			}
 
 			claims, err := token.ValidateRefreshToken(gc, refreshToken)
@@ -163,6 +164,7 @@ func TokenHandler() gin.HandlerFunc {
 					"error":             "unauthorized",
 					"error_description": err.Error(),
 				})
+				return
 			}
 			userID = claims["sub"].(string)
 			loginMethod := claims["login_method"]

Original file line number	Diff line number	Diff line change
`@@ -154,6 +154,7 @@ func TokenHandler() gin.HandlerFunc {`
`154`	`154`	`"error": "invalid_refresh_token",`
`155`	`155`	`"error_description": "The refresh token is invalid",`
`156`	`156`	`})`
	`157`	`+ return`
`157`	`158`	`}`
`158`	`159`
`159`	`160`	`claims, err := token.ValidateRefreshToken(gc, refreshToken)`
`@@ -163,6 +164,7 @@ func TokenHandler() gin.HandlerFunc {`
`163`	`164`	`"error": "unauthorized",`
`164`	`165`	`"error_description": err.Error(),`
`165`	`166`	`})`
	`167`	`+ return`
`166`	`168`	`}`
`167`	`169`	`userID = claims["sub"].(string)`
`168`	`170`	`loginMethod := claims["login_method"]`