mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-16 03:31:27 +00:00
finalization of create token logic
This commit is contained in:
@@ -390,11 +390,10 @@ export const validateProviderAuthToken = async ({
|
||||
jwt.verify(providerAuthToken, await getJwtProviderAuthSecret())
|
||||
);
|
||||
|
||||
const doesProviderMatch = (user.authProvider && user.authProvider === decodedToken.authProvider)
|
||||
|| (user.authProviders && user.authProviders.includes(decodedToken.authProvider));
|
||||
let authProviders = [...(user.authProviders || []), user.authProvider];
|
||||
|
||||
if (
|
||||
!doesProviderMatch ||
|
||||
!authProviders.includes(decodedToken.authProvider) ||
|
||||
decodedToken.email !== email
|
||||
) {
|
||||
throw new Error("Invalid authentication credentials.")
|
||||
|
||||
Reference in New Issue
Block a user