dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change invalid_scope http code to 400 (#2622)

Browse Source
This commit is contained in:
Maxime Besson 2021-10-27 00:14:15 +02:00
parent a0af787c97
commit fe4172a50a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm
View File

@ -1104,7 +1104,7 @@ sub _handleClientCredentialsGrant {
$self->userLogger->warn( 'Client '
. $client_id
. " was not granted any requested scopes ($req_scope) for $rp" );
return $self->sendOIDCError( $req, 'invalid_scope', 403 );
return $self->sendOIDCError( $req, 'invalid_scope', 400 );
}
my $infos = {
@ -1239,7 +1239,7 @@ sub _handlePasswordGrant {
$self->userLogger->warn( 'User '
. $req->sessionInfo->{ $self->conf->{whatToTrace} }
. " was not granted any requested scopes ($req_scope) for $rp" );
return $self->sendOIDCError( $req, 'invalid_scope', 403 );
return $self->sendOIDCError( $req, 'invalid_scope', 400 );
}
my $user_id = $self->getUserIDForRP( $req, $rp, $req->sessionInfo );