keycloak / keycloak-nodejs-connect / 382

81%

push

travis-ci

Fix incomplet token validation

While validateGrant, a refresh_token may be validated
as access_token (easy to do with bearer-only api)

This fix add a type checking on attribute 'typ' on the token.
Three kinds of token can be validated:
- Bearer: access_token
- Refresh: refresh_token
- ID: id_token

259 of 363 branches covered (71.35%)

Branch coverage included in aggregate %.

8 of 8 new or added lines in 1 file covered. (100.0%)

629 of 720 relevant lines covered (87.36%)

63.77 hits per line