php-guard /
oauth-server
@@ -121,10 +121,11 @@ |
||
| 121 | 121 | $redirectUris = $client->getMetadata()->getRedirectUris(); |
| 122 | 122 | if (empty($redirectUris)) { |
| 123 | 123 | if ($client instanceof PublicClientInterface || |
| 124 | - ($client instanceof ConfidentialClientInterface && $responseType->isRegistrationOfRedirectUriRequired())) |
|
| 125 | - throw new OAuthException('invalid_request', |
|
| 124 | + ($client instanceof ConfidentialClientInterface && $responseType->isRegistrationOfRedirectUriRequired())) { |
|
| 125 | + throw new OAuthException('invalid_request', |
|
| 126 | 126 | 'Clients using flows with redirection MUST register their redirection URI values', |
| 127 | 127 | 'https://tools.ietf.org/html/rfc7591#section-2.1'); |
| 128 | + } |
|
| 128 | 129 | } else { |
| 129 | 130 | if ($requestRedirectUri) { |
| 130 | 131 | if (!in_array($requestRedirectUri, $redirectUris)) { |
