From 4de0764524142e9e8fb39aa4549aacfdc8e2d73e Mon Sep 17 00:00:00 2001
From: Moonbase <alanmoonbase2004@gmail.com>
Date: Thu, 23 Jul 2026 15:26:38 -0700
Subject: [PATCH] Harden ``TokenService.ValidateAccessToken``

---
 .../Services/TokenService/TokenService.cs         | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/qtc-net-server/Services/TokenService/TokenService.cs b/qtc-net-server/Services/TokenService/TokenService.cs
index cc07299..2081c28 100644
--- a/qtc-net-server/Services/TokenService/TokenService.cs
+++ b/qtc-net-server/Services/TokenService/TokenService.cs
@@ -251,9 +251,18 @@ namespace qtc_api.Services.TokenService
 
             if (result.IsValid)
             {
-                serviceResponse.Success = true;
-                serviceResponse.Data = true;
-                return serviceResponse;
+                if (!result.ClaimsIdentity.HasClaim("TokenType", "access"))
+                {
+                    serviceResponse.Success = false;
+                    serviceResponse.Message = "Token Invalid.";
+                    return serviceResponse;
+                }
+                else
+                {
+                    serviceResponse.Success = true;
+                    serviceResponse.Data = true;
+                    return serviceResponse;
+                }
             }
             else
             {