From 29ae0193d275392ac424c066dbe17256b31afc63 Mon Sep 17 00:00:00 2001 From: Alexander Kovalev Date: Mon, 17 Jun 2024 16:07:00 +0200 Subject: [PATCH 1/2] Set proper "content-type" while calling JwtService.Reset() --- auth_test.go | 1 + token/jwt.go | 2 ++ 2 files changed, 3 insertions(+) diff --git a/auth_test.go b/auth_test.go index 15b9efbe..0e1325d8 100644 --- a/auth_test.go +++ b/auth_test.go @@ -292,6 +292,7 @@ func TestLogout(t *testing.T) { resp, err = client.Get("http://127.0.0.1:8089/auth/logout") require.Nil(t, err) assert.Equal(t, 200, resp.StatusCode) + assert.Equal(t, "application/json; charset=utf-8", resp.Header.Get("Content-Type")) defer resp.Body.Close() resp, err = client.Get("http://127.0.0.1:8089/private") diff --git a/token/jwt.go b/token/jwt.go index 72fc7e89..c899b070 100644 --- a/token/jwt.go +++ b/token/jwt.go @@ -321,6 +321,8 @@ func (j *Service) Reset(w http.ResponseWriter) { xsrfCookie := http.Cookie{Name: j.XSRFCookieName, Value: "", HttpOnly: false, Path: "/", Domain: j.JWTCookieDomain, MaxAge: -1, Expires: time.Unix(0, 0), Secure: j.SecureCookies, SameSite: j.SameSite} http.SetCookie(w, &xsrfCookie) + + w.Header().Set("Content-Type", "application/json; charset=utf-8") } // checkAuds verifies if claims.Audience in the list of allowed by audReader From baf4355a39b58979306debf227975926fd323275 Mon Sep 17 00:00:00 2001 From: Alexander Kovalev Date: Tue, 18 Jun 2024 12:51:21 +0200 Subject: [PATCH 2/2] updated V2: Set proper "content-type" while calling JwtService.Reset() --- v2/auth_test.go | 1 + v2/token/jwt.go | 2 ++ 2 files changed, 3 insertions(+) diff --git a/v2/auth_test.go b/v2/auth_test.go index 29432256..b359bfb3 100644 --- a/v2/auth_test.go +++ b/v2/auth_test.go @@ -292,6 +292,7 @@ func TestLogout(t *testing.T) { resp, err = client.Get("http://127.0.0.1:8089/auth/logout") require.Nil(t, err) assert.Equal(t, 200, resp.StatusCode) + assert.Equal(t, "application/json; charset=utf-8", resp.Header.Get("Content-Type")) defer resp.Body.Close() resp, err = client.Get("http://127.0.0.1:8089/private") diff --git a/v2/token/jwt.go b/v2/token/jwt.go index 72fc7e89..c899b070 100644 --- a/v2/token/jwt.go +++ b/v2/token/jwt.go @@ -321,6 +321,8 @@ func (j *Service) Reset(w http.ResponseWriter) { xsrfCookie := http.Cookie{Name: j.XSRFCookieName, Value: "", HttpOnly: false, Path: "/", Domain: j.JWTCookieDomain, MaxAge: -1, Expires: time.Unix(0, 0), Secure: j.SecureCookies, SameSite: j.SameSite} http.SetCookie(w, &xsrfCookie) + + w.Header().Set("Content-Type", "application/json; charset=utf-8") } // checkAuds verifies if claims.Audience in the list of allowed by audReader