Merge PR #626 into 14.0

Signed-off-by sbidoul
OCA · Mar 19, 2024 · 48b8d7e · 48b8d7e
2 parents 9cd3daf + 77df6d8
commit 48b8d7e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/auth_jwt/models/auth_jwt_validator.py b/auth_jwt/models/auth_jwt_validator.py
@@ -189,10 +189,10 @@ def _decode(self, token, secret=None):
         else:
             try:
                 header = jwt.get_unverified_header(token)
+                key = self._get_key(header.get("kid"))  # Can raise PyJWKClientError
             except Exception as e:
                 _logger.info("Invalid token: %s", e)
                 raise UnauthorizedInvalidToken() from e
-            key = self._get_key(header.get("kid"))
             algorithm = self.public_key_algorithm
         try:
             payload = jwt.decode(