add access validator

eurofurence · Mar 19, 2023 · df88ca1 · df88ca1
1 parent c375dcb
commit df88ca1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/Http/Controllers/Auth/OidcClientController.php b/app/Http/Controllers/Auth/OidcClientController.php
@@ -52,7 +52,7 @@ public function callback(Request $request)
             Session::remove("login.oauth2state");
             return Redirect::route('auth.login');
         }
-
+        Session::flush();
         /**
          * Get Tokens
          */

diff --git a/app/Http/Middleware/AccessTokenValidationMiddleware.php b/app/Http/Middleware/AccessTokenValidationMiddleware.php
@@ -37,7 +37,7 @@ public function handle(Request $request, Closure $next)
         /**
          * If token expired, refresh using refresh token.
          */
-        if (!$token->hasExpired()) {
+        if ($token->hasExpired()) {
             $provider = (new OpenIDService())->setupOIDC($request, false);
             try {
                 $token = $provider->getAccessToken('refresh_token', [