fix: catch jwt decode errors

leafsphp · Nov 12, 2024 · cafd615 · cafd615
1 parent 1a15c29
commit cafd615
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/src/Auth.php b/src/Auth.php
@@ -485,10 +485,15 @@ public function parseToken()
             return null;
         }
 
-        return (array) JWT::decode(
-            $bearerToken,
-            new Key(Config::get('token.secret'), 'HS256')
-        );
+        try {
+            return (array) JWT::decode(
+                $bearerToken,
+                new Key(Config::get('token.secret'), 'HS256')
+            );
+        } catch (\Throwable $th) {
+            $this->errorsArray['token'] = $th->getMessage();
+            return null;
+        }
     }
 
     /**