Skip to content

Commit 37c938c

Browse files
authored
Throw if IsSkillClaim and claimsValidator is null (#2761) (#2764)
1 parent 789eb19 commit 37c938c

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

libraries/botframework-connector/src/auth/jwtTokenValidation.ts

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -132,6 +132,9 @@ export namespace JwtTokenValidation {
132132
if (authConfig.validateClaims) {
133133
// Call the validation method if defined (it should throw an exception if the validation fails)
134134
await authConfig.validateClaims(claims);
135+
} else if (SkillValidation.isSkillClaim(claims)) {
136+
// Skill claims must be validated using AuthenticationConfiguration validateClaims
137+
throw new AuthenticationError('Unauthorized Access. Request is not authorized. Skill Claims require validation.', StatusCodes.UNAUTHORIZED);
135138
}
136139
}
137140

0 commit comments

Comments
 (0)