self-hosted/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2024-12-25 10:43:13 +02:00
Code Issues Releases Activity

fix(server/oauth): Handle errors from OAuth Discovery. (#4678)

Browse Source
This commit is contained in:
Skyler Mäntysaari 2023-10-28 22:35:09 +03:00 committed by GitHub
parent f0dd1d715a
commit c653e0f261
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
server/src/domain/auth/auth.service.ts
View File

@ -221,7 +221,7 @@ export class AuthService {
}
const client = await this.getOAuthClient(config);
const url = await client.authorizationUrl({
const url = client.authorizationUrl({
redirect_uri: this.normalize(config, dto.redirectUri),
scope: config.oauth.scope,
state: generators.state(),
@ -331,13 +331,18 @@ export class AuthService {
response_types: ['code'],
};
const issuer = await Issuer.discover(issuerUrl);
const algorithms = (issuer.id_token_signing_alg_values_supported || []) as string[];
if (algorithms[0] === 'HS256') {
metadata.id_token_signed_response_alg = algorithms[0];
}
try {
const issuer = await Issuer.discover(issuerUrl);
const algorithms = (issuer.id_token_signing_alg_values_supported || []) as string[];
if (algorithms[0] === 'HS256') {
metadata.id_token_signed_response_alg = algorithms[0];
}
return new issuer.Client(metadata);
return new issuer.Client(metadata);
} catch (error: Error | any) {
this.logger.error(`Error in OAuth discovery: ${error}`, error?.stack);
throw new InternalServerErrorException(`Error in OAuth discovery: ${error}`, { cause: error });
}
}
private normalize(config: SystemConfig, redirectUri: string) {