fix: add JWT parsing and expiration check in local token management
This commit is contained in:
+1
-1
@@ -116,7 +116,7 @@ async def auth_callback(payload: AuthCallbackRequest):
|
||||
raise HTTPException(status_code=400, detail=f"OIDC token exchange failed: {response.text}")
|
||||
|
||||
result = response.json()
|
||||
logger.debug("OIDC token exchange result keys: %s", list(result.keys()))
|
||||
logger.debug("OIDC callback result keys: %s", list(result.keys()))
|
||||
if "access_token" not in result:
|
||||
logger.warning("OIDC token response missing access_token; may return only id_token or an opaque token")
|
||||
return result
|
||||
|
||||
Reference in New Issue
Block a user