keycloak / keycloak-nodejs-connect / 382 / 3

81%

master: 81%

push

travis-ci

Fix incomplet token validation

While validateGrant, a refresh_token may be validated
as access_token (easy to do with bearer-only api)

This fix add a type checking on attribute 'typ' on the token.
Three kinds of token can be validated:
- Bearer: access_token
- Refresh: refresh_token
- ID: id_token

259 of 363 branches covered (71.35%)

Branch coverage included in aggregate %.

629 of 720 relevant lines covered (87.36%)

21.26 hits per line