aws-solutions / virtual-waiting-room-on-aws

Virtual Waiting Room on AWS solution helps absorb and control incoming user requests to your website during an unusually large burst of traffic, usually due to a large-scale event.
Apache License 2.0
92 stars 28 forks source link

/userInfo endpoint can fail in Open ID adapter #231

Closed JimTharioAmazon closed 4 months ago

JimTharioAmazon commented 1 year ago

Describe the bug /userInfo endpoint in open ID adapter can fail with bad request status

To Reproduce Supply access token to /userInfo endpoint - very first token generated for this request_id will fail the request, subsequent tokens generated with same claims will not fail

Expected behavior HTTP 200 status after call

Please complete the following information about the solution:

To get the version of the solution, you can look at the description of the created CloudFormation stack. For example, "(SO0021) - Video On Demand workflow with AWS Step Functions, MediaConvert, MediaPackage, S3, CloudFront and DynamoDB. Version v5.0.0". If the description does not contain the version information, you can look at the mappings section of the template:

Mappings:
  SourceCode:
    General:
      S3Bucket: "solutions"
      KeyPrefix: "video-on-demand-on-aws/v5.0.0"

Screenshots If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information).

Additional context Add any other context about the problem here.

JimTharioAmazon commented 1 year ago

Consider comparing claims only and not encoded token for this: https://github.com/aws-solutions/virtual-waiting-room-on-aws/blob/main/source/openid-waitingroom/chalice/app.py#L205

bassemwanis commented 4 months ago

The fix for this issue has been included in release 1.1.3.