ory / fosite

87%

master: 71%

LAST BUILD ON BRANCH v0.30.5

branch: v0.30.5

CHANGE BRANCH

x

Reset

• v0.30.5
• close-144
• master
• v0.6.17
• closes-150
• v0.6.18
• next-release
• regression-150
• v0.6.19
• v0.7.0
• v0.8.0
• v0.9.0
• fix-logrus
• v0.9.1
• fix-errors
• v0.9.2
• remove-jose
• v0.9.3
• fix-introspection
• v0.9.4
• v0.9.5
• fix-182
• v0.9.6
• v0.9.7
• fix-introspect
• v0.10.0
• fix-188
• closes-180
• fix-clone
• fix-181
• closes-1801
• close-194
• fix-194
• v0.11.0
• fix-refresh
• v0.11.1
• fix-scope-strategy
• v0.11.2
• fix-scope-docs
• v0.11.3
• v0.11.4
• cryptopasta
• v0.12.0
• to-dep
• v0.13.0
• add-licenses
• fix-225
• v0.13.1
• rfc-errors
• v0.14.0
• re-export-converter
• v0.14.1
• v0.14.2
• oidc-conformity
• v0.15.0
• improve-oidc-conformity
• add-acr
• v0.15.1
• utc-everywhere
• improve-oidc-checks
• v0.15.2
• fix-auth-time
• v0.15.3
• fix-codes
• v0.15.4
• fix-code
• v0.15.5
• fix-offline
• v0.15.6
• write-debug
• v0.16.0
• compose-expose
• v0.16.1
• v0.16.2
• add-pkce
• fix-209
• v0.16.3
• v0.16.4
• banner
• fix-error
• v0.16.5
• fix-cs
• v0.17.0
• add-basic-ss
• v0.17.1
• v0.17.2
• introspect-token-type
• v0.18.0
• improve-oidc
• v0.18.1
• improve-prompt-age
• v0.19.0
• improve-debug
• v0.19.1
• timing
• v0.19.2
• fix-id-token-issues
• v0.19.3
• fix-scopes
• v0.19.4
• fix-nonce
• v0.19.5
• fix-hybrid
• v0.19.6
• fix-timing-maxage
• v0.19.7
• fix-214
• fix-error-response-type
• v0.19.8
• fix-aud
• revoke-tokens-2nd
• revoke-tokens-2nd-2
• v0.20.0
• fix-ut
• v0.20.1
• fix-uq-aud
• v0.20.2
• v0.20.3
• fix-response-type
• add-jwt-auth
• improve-error
• v0.21.0
• improve-tokenauthmessage
• v0.21.1
• improve-oidc-verify
• v0.21.2
• fix-idt-exp
• v0.21.3
• rotate-hmac-key
• v0.21.4
• fix-id-token-hint-expired
• v0.22.0
• v0.23.0
• v0.24.0
• fix-tests
• v0.25.0
• contributing
• contributing-10-15-18-20-32-24
• contributing-10-15-18-20-34-07
• contributing-10-15-18-20-36-17
• contributing-10-17-18-14-50-41
• v0.25.1
• fix-jwt-extra
• v0.26.0
• v0.26.1
• aud
• aud-2
• v0.27.0
• v0.27.1
• v0.27.2
• v0.27.3
• v0.27.4
• refresh-exp
• v0.28.0
• v0.28.1
• v0.29.0
• remove-details
• key-rotation
• v0.29.1
• redirect-secure-modify
• v0.29.2
• redir-up
• v0.29.3
• v0.29.4
• fix-public-none
• v0.29.5
• v0.29.6
• contributing-05-15-19-12-38-49
• contributing-05-15-19-13-05-24
• contributing-05-23-19-11-57-12
• contributing-05-23-19-12-07-08
• contributing-05-23-19-12-10-52
• contributing-07-23-19-11-28-47
• contributing-07-23-19-11-35-28
• contributing-08-05-19-18-31-41
• pkce
• v0.29.7
• contributing-08-10-19-00-48-22
• contributing-08-10-19-00-52-57
• contributing-08-11-19-13-19-43
• contributing-08-19-19-19-01-07
• v0.29.8
• v0.30.0
• fix-pkce
• v0.30.1
• v0.30.2
• contributing-01-20-20-10-13-24
• contributing-01-20-20-10-24-59
• contributing-02-02-20-22-55-43
• fix-386
• v0.30.3
• v0.30.4
• contributing-03-18-20-19-08-24
• v0.30.6
• v0.31.0
• contributing-04-04-20-12-02-41
• contributing-04-04-20-15-45-22
• contributing-04-05-20-09-45-31
• contributing-04-12-20-10-41-32
• contributing-04-13-20-09-21-56
• fix-err
• v0.31.1
• fix-storage
• v0.31.2
• contributing-04-16-20-19-31-31
• v0.31.3
• contributing-05-12-20-10-00-36
• v0.32.0
• v0.32.1
• v0.32.2

Build # 1458

Build Type

push

travis-ci

Committed by web-flow

Commit Message

fix: handle concurrent  transactional errors in the refresh token grant handler (#402)

This commit provides the functionality required to address https://github.com/ory/hydra/issues/1719 & https://github.com/ory/hydra/issues/1735 by adding error checking to the RefreshTokenGrantHandler's PopulateTokenEndpointResponse method so it can deal with errors due to concurrent access. This will allow the authorization server to render a better error to the user-agent.

No longer returns fosite.ErrServerError in the event the storage. Instead a wrapped fosite.ErrNotFound is returned when fetching the refresh token fails due to it no longer being present. This scenario is caused when the user sends two or more request to refresh using the same token and one request gets into the handler just after the prior request finished and successfully committed its transaction.

Adds unit test coverage for transaction error handling logic added to the RefreshTokenGrantHandler's PopulateTokenEndpointResponse method

Run Details

24 of 24 new or added lines in 1 file covered. (100.0%)

3032 of 3494 relevant lines covered (86.78%)

107.69 hits per line