Commit f39484cf authored by John Davis's avatar John Davis
Browse files

Do not attempt to use a refresh token that is non-decodable

parent b00bc3ec

lib/galaxy/authnz/custos_authnz.py

+2 −0
Original line number Diff line number Diff line
@@ -133,6 +133,8 @@ class OIDCAuthnzBase(IdentityProvider): 
                return False

        except jwt.exceptions.DecodeError:

            log.error("Refresh token is non-decodable")

            # If the refresh token is non-decodable, we do not use it. See discussion in https://github.com/galaxyproject/galaxy/pull/20821

            return False



        oauth2_session = self._create_oauth2_session()

        token_endpoint = self.config.token_endpoint