Skip to content

Commit 13ead4a

Browse files
committed
Differentiate when redirect-uri is not registered from no redirect-uris for client
Signed-off-by: Ivan Kanakarakis <[email protected]>
1 parent 687b258 commit 13ead4a

File tree

1 file changed

+10
-5
lines changed

1 file changed

+10
-5
lines changed

src/pyop/request_validator.py

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,18 +43,23 @@ def redirect_uri_is_in_registered_redirect_uris(provider, authentication_request
4343
:param authentication_request: authentication request to verify
4444
:raise InvalidAuthenticationRequest: if the redirect uri is not registered
4545
"""
46-
error = InvalidRedirectURI('Redirect uri is not registered',
47-
authentication_request,
48-
oauth_error="invalid_request")
4946
try:
5047
allowed_redirect_uris = provider.clients[authentication_request['client_id']]['redirect_uris']
5148
except KeyError as e:
5249
logger.error('client metadata is missing redirect_uris')
53-
raise error
50+
raise InvalidRedirectURI(
51+
'No redirect uri registered for this client',
52+
authentication_request,
53+
oauth_error="invalid_request",
54+
)
5455

5556
if authentication_request['redirect_uri'] not in allowed_redirect_uris:
5657
logger.error("Redirect uri \'{0}\' is not registered for this client".format(authentication_request['redirect_uri']))
57-
raise error
58+
raise InvalidRedirectURI(
59+
'Redirect uri is not registered for this client',
60+
authentication_request,
61+
oauth_error="invalid_request",
62+
)
5863

5964

6065
def response_type_is_in_registered_response_types(provider, authentication_request):

0 commit comments

Comments
 (0)