Merge pull request #1678 from Teeed/auto_consistency_fix
Automatic consistency fixing in case of missing refresh token in db
This commit is contained in:
commit
ebef257dcd
@ -1344,10 +1344,14 @@ func (s *Server) handlePasswordGrant(w http.ResponseWriter, r *http.Request, cli
|
|||||||
if oldTokenRef, ok := session.Refresh[tokenRef.ClientID]; ok {
|
if oldTokenRef, ok := session.Refresh[tokenRef.ClientID]; ok {
|
||||||
// Delete old refresh token from storage.
|
// Delete old refresh token from storage.
|
||||||
if err := s.storage.DeleteRefresh(oldTokenRef.ID); err != nil {
|
if err := s.storage.DeleteRefresh(oldTokenRef.ID); err != nil {
|
||||||
s.logger.Errorf("failed to delete refresh token: %v", err)
|
if err == storage.ErrNotFound {
|
||||||
s.tokenErrHelper(w, errServerError, "", http.StatusInternalServerError)
|
s.logger.Warnf("database inconsistent, refresh token missing: %v", oldTokenRef.ID)
|
||||||
deleteToken = true
|
} else {
|
||||||
return
|
s.logger.Errorf("failed to delete refresh token: %v", err)
|
||||||
|
s.tokenErrHelper(w, errServerError, "", http.StatusInternalServerError)
|
||||||
|
deleteToken = true
|
||||||
|
return
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user