philorg/oidc-fastapi-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 2 Wiki Activity Actions

Fix scope cannot be determined when the access token cannot be decoded
All checks were successful
/ build (push) Successful in 5s
Details
/ test (push) Successful in 6s
Details

Browse source
This commit is contained in:
phil 2025-02-23 16:37:47 +01:00
parent f6a84fd3aa
commit 850db9f590
1 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/oidc_test/main.py
View file

@ -123,19 +123,20 @@ async def home(
try: try:
access_token_parsed = provider.decode(token["access_token"], verify_signature=False) access_token_parsed = provider.decode(token["access_token"], verify_signature=False)
context["access_token_parsed"] = access_token_parsed context["access_token_parsed"] = access_token_parsed
context["access_token_scope"] = access_token_parsed.get("scope")
except PyJWTError as err: except PyJWTError as err:
access_token_parsed = {"Cannot parse": err.__class__.__name__} context["access_token_parsed"] = {"Cannot parse": err.__class__.__name__}
context["access_token_scope"] = None
try: try:
id_token_parsed = provider.decode(token["id_token"], verify_signature=False) id_token_parsed = provider.decode(token["id_token"], verify_signature=False)
context["id_token_parsed"] = id_token_parsed context["id_token_parsed"] = id_token_parsed
except PyJWTError as err: except PyJWTError as err:
id_token_parsed = {"Cannot parse": err.__class__.__name__} context["id_token_parsed"] = {"Cannot parse": err.__class__.__name__}
try: try:
refresh_token_parsed = provider.decode(token["refresh_token"], verify_signature=False) refresh_token_parsed = provider.decode(token["refresh_token"], verify_signature=False)
context["refresh_token_parsed"] = refresh_token_parsed context["refresh_token_parsed"] = refresh_token_parsed
except PyJWTError as err: except PyJWTError as err:
refresh_token_parsed = {"Cannot parse": err.__class__.__name__} context["refresh_token_parsed"] = {"Cannot parse": err.__class__.__name__}
context["access_token_scope"] = access_token_parsed.get("scope")
context["resources"] = registry.resources context["resources"] = registry.resources
context["resource_providers"] = provider.resource_providers context["resource_providers"] = provider.resource_providers
return templates.TemplateResponse(name="home.html", request=request, context=context) return templates.TemplateResponse(name="home.html", request=request, context=context)