···

       
401
       
401
       
 
       


     

       
402
       
402
       
 
       
		accessToken := pts[1]

     

       
403
       
403
       
 
       


     

       
404
       
404
       
+
       
		nonce := s.oauthProvider.NextNonce()

     

       
405
       
405
       
+
       
		if nonce != "" {

     

       
406
       
406
       
+
       
			e.Response().Header().Set("DPoP-Nonce", nonce)

     

       
407
       
407
       
+
       
			e.Response().Header().Add("access-control-expose-headers", "DPoP-Nonce")

     

       
408
       
408
       
+
       
		}

     

       
409
       
409
       
+
       


     

       
404
       
410
       
 
       
		proof, err := s.oauthProvider.DpopManager.CheckProof(e.Request().Method, "https://"+s.config.Hostname+e.Request().URL.String(), e.Request().Header, to.StringPtr(accessToken))

     

       
405
       
411
       
 
       
		if err != nil {

     

       
406
       
412
       
 
       
			s.logger.Error("invalid dpop proof", "error", err)

     
···

       
430
       
436
       
 
       
		if err != nil {

     

       
431
       
437
       
 
       
			s.logger.Error("could not find actor in db", "error", err)

     

       
432
       
438
       
 
       
			return helpers.ServerError(e, nil)

     

       
433
       
433
       
-
       
		}

     

       
434
       
434
       
-
       


     

       
435
       
435
       
-
       
		nonce := s.oauthProvider.NextNonce()

     

       
436
       
436
       
-
       
		if nonce != "" {

     

       
437
       
437
       
-
       
			e.Response().Header().Set("DPoP-Nonce", nonce)

     

       
438
       
438
       
-
       
			e.Response().Header().Add("access-control-expose-headers", "DPoP-Nonce")

     

       
439
       
439
       
 
       
		}

     

       
440
       
440
       
 
       


     

       
441
       
441
       
 
       
		e.Set("repo", repo)