fix error: if Bearer token is no JWT

Signed-off-by: Aaron Lewandowski <[email protected]>
nextcloud · Nov 24, 2023 · 11dda10 · 11dda10
1 parent 278bdd4
commit 11dda10
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/User/Backend.php b/lib/User/Backend.php
@@ -230,6 +230,12 @@ public function getCurrentUserId(): string {
 			return '';
 		}
 
+		$tks = \explode('.', $headerToken);
+        if (\count($tks) !== 3) {
+			$this->logger->debug('Bearer token is no JWT');
+			return '';
+		}
+
 		$oidcSystemConfig = $this->config->getSystemValue('user_oidc', []);
 		// check if we should use UserInfoValidator (default is false)
 		if (!isset($oidcSystemConfig['userinfo_bearer_validation']) || !$oidcSystemConfig['userinfo_bearer_validation']) {