Return errors to clients without throwing them

[jmandel]

smart-launcher/src/TokenHandler.js

Lines 167 to 179 in 489fedc

	if (token.code_challenge_method === 'S256') {
	const hash = crypto.createHash('sha256');
	hash.update(this.request.body.code_verifier || "");
	const code_challenge = jose.util.base64url.encode(hash.digest());
	if (code_challenge !== token.code_challenge) {
	throw Lib.OAuthError.from({
	code : 401,
	error: "invalid_grant",
	msg : "Invalid grant or Invalid PKCE Verifier, '%s' vs '%s'."
	}, code_challenge, token.code_challenge);
	}
	}

these "throw" statements are causing the server to crash, instead of returning an error to the client.