Skip to content

Commit e40fe84

Browse files
committed
return 400 Bad request if clientData could not be parsed in the register endpoint
1 parent 702c75b commit e40fe84

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

www/idp/index.php

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -325,6 +325,10 @@
325325
case "/register/":
326326
$postData = file_get_contents("php://input");
327327
$clientData = json_decode($postData, true);
328+
if (!isset($clientData)) {
329+
header("HTTP/1.1 400 Bad request");
330+
return;
331+
}
328332
$parsedOrigin = parse_url($clientData['redirect_uris'][0]);
329333
$origin = $parsedOrigin['scheme'] . '://' . $parsedOrigin['host'];
330334
if (isset($parsedOrigin['port'])) {
@@ -382,7 +386,7 @@
382386

383387
$requestFactory = new \Laminas\Diactoros\ServerRequestFactory();
384388
$request = $requestFactory->fromGlobals($_SERVER, $_GET, $_POST, $_COOKIE, $_FILES);
385-
$requestBody = $request->getParsedBody();
389+
$requestBody = $request->getParsedBody();
386390

387391
$grantType = isset($requestBody['grant_type']) ? $requestBody['grant_type'] : null;
388392
$clientId = isset($requestBody['client_id']) ? $requestBody['client_id'] : null;

0 commit comments

Comments
 (0)