QtC.NET/qtcnet-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

Harden `TokenService.ValidateAccessToken`

Browse Source
This commit is contained in:
Alan Moon 2026-07-23 15:26:38 -07:00
parent 0313e52c86
commit 4de0764524
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
qtc-net-server/Services/TokenService/TokenService.cs
View File

@ -250,11 +250,20 @@ namespace qtc_api.Services.TokenService
TokenValidationResult result = await tokenHandler.ValidateTokenAsync(accessToken, validationParams.Data); TokenValidationResult result = await tokenHandler.ValidateTokenAsync(accessToken, validationParams.Data);
if (result.IsValid) if (result.IsValid)
{
if (!result.ClaimsIdentity.HasClaim("TokenType", "access"))
{
serviceResponse.Success = false;
serviceResponse.Message = "Token Invalid.";
return serviceResponse;
}
else
{ {
serviceResponse.Success = true; serviceResponse.Success = true;
serviceResponse.Data = true; serviceResponse.Data = true;
return serviceResponse; return serviceResponse;
} }
}
else else
{ {
serviceResponse.Success = true; serviceResponse.Success = true;