CalvinBackup/phishingclub
1
0
Fork 0
mirror of https://github.com/phishingclub/phishingclub.git synced 2026-06-11 00:37:56 +02:00
Code Issues Packages Projects Releases Wiki Activity

remove totp token logs

Browse Source 
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
This commit is contained in:
Ronni Skansing
2026-06-04 10:29:58 +02:00
parent 123da36b5b
commit 5faced7c22
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/service/oauthProvider.go
+3 -3
View File
@@ -450,7 +450,7 @@ func (o *OAuthProvider) ExchangeCodeForTokens(
oauthState, err := o.OAuthStateRepository.GetByStateToken(ctx, stateToken)
if err != nil {
if errors.Is(err, gorm.ErrRecordNotFound) {
o.Logger.Warnw("invalid or expired state token", "stateToken", stateToken)
o.Logger.Warn("invalid or expired state token")
return errors.New("invalid or expired state token")
}
o.Logger.Errorw("failed to retrieve state token", "error", err)
@@ -459,13 +459,13 @@ func (o *OAuthProvider) ExchangeCodeForTokens(
// validate state token hasn't been used (prevent replay attacks)
if oauthState.Used {
o.Logger.Warnw("state token already used", "stateToken", stateToken)
o.Logger.Warnw("state token already used", "oauthProviderID", oauthState.OAuthProviderID.MustGet().String())
return errors.New("state token already used")
}
// validate state token hasn't expired
if oauthState.ExpiresAt != nil && time.Now().After(*oauthState.ExpiresAt) {
o.Logger.Warnw("state token expired", "stateToken", stateToken, "expiresAt", oauthState.ExpiresAt)
o.Logger.Warnw("state token expired", "oauthProviderID", oauthState.OAuthProviderID.MustGet().String(), "expiresAt", oauthState.ExpiresAt)
return errors.New("state token expired")
}