From 459971f791c8e5b0a1d7b4815d9a3a9389044693 Mon Sep 17 00:00:00 2001
From: Meghan Denny <hello@nektro.net>
Date: Fri, 30 Jun 2023 01:48:31 -0700
Subject: [PATCH] callback: error if token_type is not bearer

---
 src/lib.zig | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/lib.zig b/src/lib.zig
index f7a69ccf59185840f692278f94e1802fae1a877c..7f9d96cc0e00a8366b182b65f5c57a1c25e1945b 100644
--- a/src/lib.zig
+++ b/src/lib.zig
@@ -277,6 +277,9 @@ pub fn Handlers(comptime T: type) type {
             if (req.status != .ok) return error.OauthBadToken;
             const val = try extras.parse_json(alloc, body_content);
 
+            const tt = val.root.object.get("token_type").?.string;
+            if (!std.mem.eql(u8, tt, "bearer")) return fail(response, body_writer, "oauth2: invalid token type: {s}", .{tt});
+
             const at = val.root.object.get("access_token") orelse return try fail(response, body_writer, "Identity Provider Login Error!\n{s}", .{body_content});
 
             const req2 = try zfetch.Request.init(alloc, client.provider.me_url, null);
-- 
2.54.0