Behaviour with missing token

payprop / net-oauth2-authorizationserver

Module to implement core functions of an OAuth2 authorization server

7 stars 10 forks source link

Behaviour with missing token #27

Closed mattlaw closed 3 years ago

mattlaw commented 4 years ago

When presented with the header Authorization: Bearer (with no token), is it correct that verify_token_and_scope invokes the verify_access_token callback with an undefined access_token?

leejo commented 4 years ago

Nope, that's a bug!