Prechádzať zdrojové kódy

auth: reject empty signing method for JWT token provider

Anthony Romano 9 rokov pred
rodič
commit
fe727f3106
1 zmenil súbory, kde vykonal 3 pridanie a 1 odobranie
  1. 3 1
      auth/jwt.go

+ 3 - 1
auth/jwt.go

@@ -97,7 +97,9 @@ func prepareOpts(opts map[string]string) (jwtSignMethod, jwtPubKeyPath, jwtPrivK
 			return "", "", "", ErrInvalidAuthOpts
 			return "", "", "", ErrInvalidAuthOpts
 		}
 		}
 	}
 	}
-
+	if len(jwtSignMethod) == 0 {
+		return "", "", "", ErrInvalidAuthOpts
+	}
 	return jwtSignMethod, jwtPubKeyPath, jwtPrivKeyPath, nil
 	return jwtSignMethod, jwtPubKeyPath, jwtPrivKeyPath, nil
 }
 }