Merge pull request DuendeArchive#307 from manurosa/dev

brockallen · web-flow · commit 704b451792be · 2017-09-23T13:31:12.000-04:00
Fix log and error messages in sub validation from userinfo
diff --git a/src/ResponseValidator.js b/src/ResponseValidator.js
@@ -136,8 +136,8 @@ export default class ResponseValidator {
                     Log.debug("user info claims received from user info endpoint");
 
                     if (claims.sub !== response.profile.sub) {
-                        Log.error("sub from user info endpoint does not match sub in id_token");
-                        return Promise.reject(new Error("sub from user info endpoint does not match sub in id_token"));
+                        Log.error("sub from user info endpoint does not match sub in access_token");
+                        return Promise.reject(new Error("sub from user info endpoint does not match sub in access_token"));
                     }
 
                     response.profile = this._mergeClaims(response.profile, claims);

Original file line number	Diff line number	Diff line change
`@@ -136,8 +136,8 @@ export default class ResponseValidator {`
`136`	`136`	`Log.debug("user info claims received from user info endpoint");`
`137`	`137`
`138`	`138`	`if (claims.sub !== response.profile.sub) {`
`139`		`- Log.error("sub from user info endpoint does not match sub in id_token");`
`140`		`- return Promise.reject(new Error("sub from user info endpoint does not match sub in id_token"));`
	`139`	`+ Log.error("sub from user info endpoint does not match sub in access_token");`
	`140`	`+ return Promise.reject(new Error("sub from user info endpoint does not match sub in access_token"));`
`141`	`141`	`}`
`142`	`142`
`143`	`143`	`response.profile = this._mergeClaims(response.profile, claims);`