Update the `ValidateIntrospectionDemand` and `ValidateRevocationDemand` handlers to eagerly abort introspection/revocation requests that lack tokens - Githubissues

openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

https://openiddict.com/

Apache License 2.0

4.47k stars 527 forks source link

Update the `ValidateIntrospectionDemand` and `ValidateRevocationDemand` handlers to eagerly abort introspection/revocation requests that lack tokens #2218

Closed kevinchalet closed 2 weeks ago

kevinchalet commented 3 weeks ago

Confirm you've already contributed to this project or that you sponsor it

[X] I confirm I'm a sponsor or a contributor

Describe the solution you'd like

https://github.com/openiddict/openiddict-core/blob/2ce7d32020fd203d0f235faf3f0599646bdb1f83/src/OpenIddict.Client/OpenIddictClientHandlers.cs#L6151-L6185

https://github.com/openiddict/openiddict-core/blob/2ce7d32020fd203d0f235faf3f0599646bdb1f83/src/OpenIddict.Client/OpenIddictClientHandlers.cs#L6821-L6855

Additional context

No response