Separation of token parsing and validation

thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server

https://oauth2.thephpleague.com

MIT License

6.52k stars 1.12k forks source link

Separation of token parsing and validation #1198

Closed eugene-borovov closed 3 years ago

eugene-borovov commented 3 years ago

Fixes #1197

Test testDetermineAccessTokenInHeaderInvalidJWT asserts only on validation error. Parse errors will be catched by test testDetermineAccessTokenInHeaderInvalidToken.

Sephster commented 3 years ago

Thank you.