@@ -102,8 +102,7 @@ |
||
102 | 102 | if($this->idTokenHint['sub'] !== $this->resourceOwner->getIdentifier()) { |
103 | 103 | if($this->prompt == self::PROMPT_NONE) { |
104 | 104 | throw new OAuthException('invalid_request'); |
105 | - } |
|
106 | - else { |
|
105 | + } else { |
|
107 | 106 | throw new OAuthException('login_required'); |
108 | 107 | } |
109 | 108 | } |
@@ -327,10 +327,11 @@ |
||
327 | 327 | $redirectUris = $this->getClient()->getMetadata()->getRedirectUris(); |
328 | 328 | if (empty($redirectUris)) { |
329 | 329 | if ($this->getClient() instanceof PublicClientInterface || |
330 | - ($this->getClient() instanceof ConfidentialClientInterface && $responseType == 'token')) |
|
331 | - throw new OAuthException('invalid_request', |
|
330 | + ($this->getClient() instanceof ConfidentialClientInterface && $responseType == 'token')) { |
|
331 | + throw new OAuthException('invalid_request', |
|
332 | 332 | 'Clients using flows with redirection MUST register their redirection URI values', |
333 | 333 | 'https://tools.ietf.org/html/rfc7591#section-2.1'); |
334 | + } |
|
334 | 335 | } else { |
335 | 336 | if ($redirectUri) { |
336 | 337 | if (!in_array($redirectUri, $redirectUris)) { |