medplum / medplum / 27803070482

92%

push

github

fix: add Accept-Encoding: identity to token exchange in verifyExternalCode (#9560)

The authorization-code callback path in verifyExternalCode did not set
Accept-Encoding: identity, so Node/undici defaults to sending
Accept-Encoding: gzip. When the IdP returns a gzip-compressed token
response, response.json() throws and the user sees a generic
'Failed to verify code' error.

This is the same class of bug fixed for the userinfo fetch in #9554,
which added Accept-Encoding: identity to getExternalUserInfo. This
commit applies the same fix to the token-exchange fetch.

Fixes #9558

Signed-off-by: Raphael Malikian <rtmalikian@gmail.com>

24832 of 27648 branches covered (89.81%)

Branch coverage included in aggregate %.

37223 of 39443 relevant lines covered (94.37%)

23158.45 hits per line