Added free on jwt

HashLoad · Apr 18, 2019 · ae37ed0 · ae37ed0
1 parent d625d18
commit ae37ed0
Showing 1 changed file with 24 additions and 20 deletions.
diff --git a/src/Horse.JWT.pas b/src/Horse.JWT.pas
@@ -53,34 +53,38 @@ procedure Middleware(Req: THorseRequest; Res: THorseResponse; Next: TProc);
 
   LValidations := TJOSEConsumerBuilder.NewConsumer.SetVerificationKey(SecretJWT)
     .SetSkipVerificationKeyValidation.SetRequireExpirationTime.Build;
-
-  LJWT := TJOSEContext.Create(LToken, TJWTClaims);
   try
+
+    LJWT := TJOSEContext.Create(LToken, TJWTClaims);
     try
       try
-        LValidations.ProcessContext(LJWT);
-        LJSON := LJWT.GetClaims.JSON;
+        try
+          LValidations.ProcessContext(LJWT);
+          LJSON := LJWT.GetClaims.JSON;
 
-        if Assigned(SessionClass) then
-        begin
-          LSession := SessionClass.Create;
-          TJson.JsonToObject(LSession, LJSON);
-        end
-        else
-          LSession := LJSON;
+          if Assigned(SessionClass) then
+          begin
+            LSession := SessionClass.Create;
+            TJson.JsonToObject(LSession, LJSON);
+          end
+          else
+            LSession := LJSON;
 
-        THorseHackRequest(Req).SetSession(LSession);
-        Next();
-      finally
-        LSession.Free;
-      end;
+          THorseHackRequest(Req).SetSession(LSession);
+          Next();
+        finally
+          LSession.Free;
+        end;
 
-    except
-      Res.Send('Unauthorized').Status(401);
-      raise EHorseCallbackInterrupted.Create;
+      except
+        Res.Send('Unauthorized').Status(401);
+        raise EHorseCallbackInterrupted.Create;
+      end;
+    finally
+      LJWT.Free;
     end;
   finally
-    LJWT.Free;
+    LValidations.Free;
   end;
 end;