Merge pull request #172 from AI-READI/auth-claims-error-handling

added email regex to email claim
AI-READI · Dec 20, 2024 · 315f0f5 · 315f0f5
2 parents 1cf0d6e + 4c3e3aa
commit 315f0f5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/server/routes/login.get.ts b/server/routes/login.get.ts
@@ -52,7 +52,8 @@ function getEmail(tokenResponse: AuthenticationResult): string {
     email = tokenResponse.account.username;
   } else if (
     "email" in tokenResponse.idTokenClaims &&
-    typeof tokenResponse.idTokenClaims.email === "string"
+    typeof tokenResponse.idTokenClaims.email === "string" &&
+    emailRegex.test(tokenResponse.idTokenClaims.email)
   ) {
     email = tokenResponse.idTokenClaims.email;
   } else if ("emails" in tokenResponse.idTokenClaims) {