@@ -15,15 +15,17 @@ def revoke
1515
1616 time_diff = ( Time . now . to_i - timestamp . to_i ) . abs
1717 if time_diff > 5 . minutes . to_i
18- if SiteSetting . discourse_login_debug_auth
18+ if SiteSetting . discourse_login_client_verbose_logging
1919 Rails . logger . warn (
2020 "Expired timestamp in discourse_login_client revoke: #{ time_diff } seconds old" ,
2121 )
2222 end
23+
2324 return render_invalid_request
2425 end
2526
2627 return render_invalid_request if ( client_id = SiteSetting . discourse_login_client_id ) . blank?
28+
2729 if ( client_secret = SiteSetting . discourse_login_client_secret ) . blank?
2830 return render_invalid_request
2931 end
@@ -34,9 +36,10 @@ def revoke
3436 OpenSSL ::HMAC . hexdigest ( "sha256" , hashed_secret , "#{ client_id } :#{ identifier } :#{ timestamp } " )
3537
3638 if !ActiveSupport ::SecurityUtils . secure_compare ( signature , expected_signature )
37- if SiteSetting . discourse_login_debug_auth
39+ if SiteSetting . discourse_login_client_verbose_logging
3840 Rails . logger . warn ( "Invalid signature for user id #{ identifier } in discourse_login revoke" )
3941 end
42+
4043 return render_invalid_request
4144 end
4245
@@ -45,9 +48,10 @@ def revoke
4548 provider_name : "discourse_login" ,
4649 provider_uid : identifier ,
4750 )
48- if SiteSetting . discourse_login_debug_auth
51+ if SiteSetting . discourse_login_client_verbose_logging
4952 Rails . logger . warn ( "User not found with provider_uid: #{ identifier } " )
5053 end
54+
5155 return render_invalid_request
5256 end
5357
0 commit comments