@@ -102,8 +102,7 @@ |
||
| 102 | 102 | if($this->idTokenHint['sub'] !== $this->resourceOwner->getIdentifier()) { |
| 103 | 103 | if($this->prompt == self::PROMPT_NONE) { |
| 104 | 104 | throw new OAuthException('invalid_request'); |
| 105 | - } |
|
| 106 | - else { |
|
| 105 | + } else { |
|
| 107 | 106 | throw new OAuthException('login_required'); |
| 108 | 107 | } |
| 109 | 108 | } |
@@ -327,10 +327,11 @@ |
||
| 327 | 327 | $redirectUris = $this->getClient()->getMetadata()->getRedirectUris(); |
| 328 | 328 | if (empty($redirectUris)) { |
| 329 | 329 | if ($this->getClient() instanceof PublicClientInterface || |
| 330 | - ($this->getClient() instanceof ConfidentialClientInterface && $responseType == 'token')) |
|
| 331 | - throw new OAuthException('invalid_request', |
|
| 330 | + ($this->getClient() instanceof ConfidentialClientInterface && $responseType == 'token')) { |
|
| 331 | + throw new OAuthException('invalid_request', |
|
| 332 | 332 | 'Clients using flows with redirection MUST register their redirection URI values', |
| 333 | 333 | 'https://tools.ietf.org/html/rfc7591#section-2.1'); |
| 334 | + } |
|
| 334 | 335 | } else { |
| 335 | 336 | if ($redirectUri) { |
| 336 | 337 | if (!in_array($redirectUri, $redirectUris)) { |