properly reject unauthorized clients

2025-01-18 12:28:03 +00:00
parent f835545283
commit 5a95fe8bef
1 changed files with 2 additions and 2 deletions
@@ -92,8 +92,8 @@ async function oauth2(request, env) {

 	const client_secret = await env[requestBody.get('client_id')]

-	if (client_secret === null) {
-		return newResponse(null, { status: 403 })
+	if (!client_secret) {
+		return newResponse(null, { status: 403,statusText:'unauthorized client' })
 	}

 	requestBody.append('client_secret', client_secret)