anvilresearch / connect

A modern authorization server built to authenticate your users and protect your APIs
http://anvil.io
MIT License
361 stars 85 forks source link

fix(error_handling): handle the exception that could be thrown by the call to 'toJWT' #356

Closed camfou closed 4 years ago

camfou commented 7 years ago

Hi,

The POST on /signin with malformed scope list make the instance crash !! It can be reproduced with this value : scope=openid%20profile%email This PR avoid the crash.

Regards, Camille

coveralls commented 7 years ago

Coverage Status

Coverage increased (+0.01%) to 79.764% when pulling 52cc5220f43b7d72e12b82c021306ece1f13a335 on camfou:handle_exception_toJWT into 9ed00d53283cd1ac0df1e653caf06cc6e5464073 on anvilresearch:master.

coveralls commented 6 years ago

Coverage Status

Coverage increased (+0.01%) to 79.764% when pulling 2fb40ffeed449711595ae969237ad50ec6e28c0c on camfou:handle_exception_toJWT into 325f639980d7c6914913938a247d813ccc6de963 on anvilresearch:master.