Return 401 status when JWT validation fails (#1929)

graphile · Jan 31, 2024 · 90ced55 · 90ced55
2 parents 80ea828 + 7587ca9
commit 90ced55
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/.changeset/tough-swans-juggle.md b/.changeset/tough-swans-juggle.md
@@ -0,0 +1,5 @@
+---
+"postgraphile": patch
+---
+
+PgLazyJWTPreset: return 401 error when validation of JWT fails.
diff --git a/postgraphile/postgraphile/src/presets/lazy-jwt.ts b/postgraphile/postgraphile/src/presets/lazy-jwt.ts
@@ -52,9 +52,14 @@ const GrafservPgJWTPlugin: GraphileConfig.Plugin = {
                       },
                       (err, claims) => {
                         if (err) {
+                          (err as any).statusCode = 401;
                           reject(err);
                         } else if (!claims || typeof claims === "string") {
-                          reject(new Error("Invalid JWT payload"));
+                          reject(
+                            Object.assign(new Error("Invalid JWT payload"), {
+                              statusCode: 401,
+                            }),
+                          );
                         } else {
                           resolve(claims);
                         }