added validation of grant type

hypersign-protocol · Mar 11, 2024 · 8e148c7 · 8e148c7
1 parent 9418c2a
commit 8e148c7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/utils/middleware/cors.middleware.ts b/src/utils/middleware/cors.middleware.ts
@@ -67,6 +67,9 @@ export class WhitelistSSICorsMiddleware implements NestMiddleware {
         throw new UnauthorizedException([e]);
       }
 
+      if (decoded.grantType != 'access_service_ssi') {
+        throw new BadRequestException(['Invalid grant type for this service']);
+      }
       type App = {
         appId?: string;
         kmsId?: string;