We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 760be47 + 09735b3 commit d164e93Copy full SHA for d164e93
src/GraphQL/Mutations/RefreshToken.php
@@ -49,9 +49,15 @@ public function parseToken($accessToken)
49
{
50
// since we are generating the token in an internal request, there
51
// is no need to verify signature to extract the sub claim
52
+ $appKey = explode(':', config('app.key'));
53
+
54
+ if (! isset($appKey[1])) {
55
+ return false;
56
+ }
57
58
$config = Configuration::forSymmetricSigner(
59
new Blake2b(),
- InMemory::plainText('refresh-token')
60
+ InMemory::base64Encoded($appKey[1])
61
);
62
63
$token = $config->parser()->parse((string) $accessToken);
0 commit comments