zmartzone / lua-resty-openidc

OpenID Connect Relying Party and OAuth 2.0 Resource Server implementation in Lua for NGINX / OpenResty
Apache License 2.0
964 stars 247 forks source link

500 error with invalid token (missing release of fix for issue #473 ?) #513

Open rjbma opened 5 months ago

rjbma commented 5 months ago
Environment
Expected behaviour

A 401 response

Actual behaviour

A 500 response

Minimized example

Send an invalid token without any space char. Example: THIS_IS_INVALID

This is exactly the same as #473, and I believe the fix implemented will resolve this. However, from what I understand, 1.7.6-3 is the latest released version, which means the fix for that issue hasn't been released (I may be mistaken though, I am not proficient in Lua at all, or its ecosystem).

Are there any plans to release this fix?