Browse Source

auth: reject empty signing method for JWT token provider

Anthony Romano 8 years ago
parent
commit
fe727f3106
1 changed files with 3 additions and 1 deletions
  1. 3 1
      auth/jwt.go

+ 3 - 1
auth/jwt.go

@@ -97,7 +97,9 @@ func prepareOpts(opts map[string]string) (jwtSignMethod, jwtPubKeyPath, jwtPrivK
 			return "", "", "", ErrInvalidAuthOpts
 		}
 	}
-
+	if len(jwtSignMethod) == 0 {
+		return "", "", "", ErrInvalidAuthOpts
+	}
 	return jwtSignMethod, jwtPubKeyPath, jwtPrivKeyPath, nil
 }