Validate Authorization transaction

this also sets default values for missing fields.
EmissarySocial · Oct 17, 2023 · f4f41b4 · f4f41b4
1 parent 871fecf
commit f4f41b4
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/handler/oauth-server.go b/handler/oauth-server.go
@@ -84,6 +84,11 @@ func PostOAuthAuthorization(serverFactory *server.Factory) echo.HandlerFunc {
 			return derp.Wrap(err, location, "Error loading OAuth Application")
 		}
 
+		// Validate the transaction
+		if err := transaction.Validate(application); err != nil {
+			return derp.Wrap(err, location, "Invalid transaction")
+		}
+
 		// Create a UserToken
 		userTokenService := factory.OAuthUserToken()
 		userToken, err := userTokenService.Create(application, authorization, transaction)