Made scope parameter compulsary for id_token only

TalaoDAO · Oct 6, 2023 · 481dfe1 · 481dfe1
1 parent f9d1805
commit 481dfe1
Showing 1 changed file with 11 additions and 11 deletions.
diff --git a/lib/dashboard/qr_code/qr_code_scan/cubit/qr_code_scan_cubit.dart b/lib/dashboard/qr_code/qr_code_scan/cubit/qr_code_scan_cubit.dart
@@ -605,17 +605,6 @@ class QRCodeScanCubit extends Cubit<QRCodeScanState> {
       }
     }
 
-    final scope = state.uri!.queryParameters['scope'];
-    if (scope == null || scope != 'openid') {
-      throw ResponseMessage(
-        data: {
-          'error': 'invalid_request',
-          'error_description':
-              'The openid scope is required in the scope list.',
-        },
-      );
-    }
-
     final redirectUri = state.uri!.queryParameters['redirect_uri'];
     final clientId = state.uri!.queryParameters['client_id'];
     final isUrl = isURL(clientId.toString());
@@ -624,6 +613,17 @@ class QRCodeScanCubit extends Cubit<QRCodeScanState> {
     if (responseType == 'id_token') {
       /// verifier side (siopv2)
 
+      final scope = state.uri!.queryParameters['scope'];
+      if (scope == null || scope != 'openid') {
+        throw ResponseMessage(
+          data: {
+            'error': 'invalid_request',
+            'error_description':
+                'The openid scope is required in the scope list.',
+          },
+        );
+      }
+
       if (redirectUri == null) {
         throw ResponseMessage(
           data: {