changed invalidation

wwWallet · Sep 26, 2023 · 22b0399 · 22b0399
1 parent 42a2d69
commit 22b0399
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/src/openid4vci/grant_types/AuthorizationCodeGrant.ts b/src/openid4vci/grant_types/AuthorizationCodeGrant.ts
@@ -56,8 +56,11 @@ export async function authorizationCodeGrantTokenEndpoint(body: TokenRequestBody
 		.getOne();
 
 	if (!userSession) {
-		throw `No user session was found for authorization code ${body.code}`
+		throw new Error(`No user session was found for authorization code ${body.code}`)
 	}
+
+	userSession.state = undefined;
+	await AppDataSource.getRepository(AuthorizationServerState).save(userSession);
 
 	return generateAccessToken(userSession);
 }
diff --git a/src/services/OpenidForCredentialIssuingAuthorizationServerService.ts b/src/services/OpenidForCredentialIssuingAuthorizationServerService.ts
@@ -178,12 +178,7 @@ export class OpenidForCredentialIssuingAuthorizationServerService implements Ope
 				// }
 				// if (!userSession.categorizedRawCredentials)
 				// 	throw new Error("Could not get categorized raw credential");
-
 				response = await authorizationCodeGrantTokenEndpoint(body, req.headers.authorization);
-				if (state.authorization_code) {
-					state.authorization_code = "";
-					await this.authorizationServerStateRepository.save(state);
-				}
 			}
 			catch (err) {
 				console.error("Error = ", err)