Fix OAuth2 error code when supplying invalid code

4 years ago · 4841c7755e
parent 5a8c20584b
commit 4841c7755e
1 changed files with 1 additions and 1 deletions
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Issuer/OpenIDConnect.pm
@ -1263,7 +1263,7 @@ sub _handleAuthorizationCodeGrant {
    my $codeSession = $self->getAuthorizationCode($code);
    unless ($codeSession) {
        $self->logger->error("Unable to find OIDC session $code");
-        return $self->sendOIDCError( $req, 'invalid_request', 400 );
+        return $self->sendOIDCError( $req, 'invalid_grant', 400 );
    }

    $codeSession->remove();