fix: handle DPoP htu validation when mounted in express

Closes #572
panva · Nov 7, 2019 · f34526c · f34526c
1 parent ae33ef8
commit f34526c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/helpers/oidc_context.js b/lib/helpers/oidc_context.js
@@ -148,7 +148,7 @@ module.exports = function getContext(provider) {
         if (payload.htm !== this.ctx.method) {
           throw new Error('htm mismatch');
         }
-        if (payload.htu !== `${this.ctx.origin}${this.ctx.path}`) {
+        if (payload.htu !== `${this.urlFor(this.route)}`) {
           throw new Error('htu mismatch');
         }