@@ -75,7 +75,7 @@ NHttp::THttpOutgoingResponsePtr GetHttpOutgoingResponsePtr(const NHttp::THttpInc
7575 << GetAuthCallbackUrl ();
7676 NHttp::THeadersBuilder responseHeaders;
7777 responseHeaders.Set (" Set-Cookie" , context.CreateYdbOidcCookie (settings.ClientSecret ));
78- if (context.GetIsAjaxRequest ()) {
78+ if (context.IsAjaxRequest ()) {
7979 return CreateResponseForAjaxRequest (request, responseHeaders, redirectUrl);
8080 }
8181 responseHeaders.Set (" Location" , redirectUrl);
@@ -122,16 +122,21 @@ TRestoreOidcContextResult RestoreSessionStoredOnClientSide(const TString& state,
122122 stateStruct = jsonStateStruct->GetStringRobust ();
123123 stateStruct = Base64Decode (stateStruct);
124124 }
125+ if (stateStruct.Empty ()) {
126+ return TRestoreOidcContextResult ({.IsSuccess = false ,
127+ .IsErrorRetryable = false ,
128+ .ErrorMessage = errorMessage << " Struct with state is empty" });
129+ }
125130 const NJson::TJsonValue* jsonDigest = nullptr ;
126131 if (jsonValue.GetValuePointer (" digest" , &jsonDigest)) {
127132 expectedDigest = jsonDigest->GetStringRobust ();
128133 expectedDigest = Base64Decode (expectedDigest);
129134 }
130- }
131- if (stateStruct. Empty () || expectedDigest. Empty ()) {
132- return TRestoreOidcContextResult ({. IsSuccess = false ,
133- . IsErrorRetryable = false ,
134- . ErrorMessage = errorMessage << " Struct with state and expected digest are empty " });
135+ if (expectedDigest. Empty ()) {
136+ return TRestoreOidcContextResult ({. IsSuccess = false ,
137+ . IsErrorRetryable = false ,
138+ . ErrorMessage = errorMessage << " Expected digest is empty " });
139+ }
135140 }
136141 TString digest = HmacSHA256 (secret, stateStruct);
137142 if (expectedDigest != digest) {
@@ -153,7 +158,7 @@ TRestoreOidcContextResult RestoreSessionStoredOnClientSide(const TString& state,
153158 } else {
154159 return TRestoreOidcContextResult ({.IsSuccess = false ,
155160 .IsErrorRetryable = false ,
156- .ErrorMessage = errorMessage << " Requested address not found in cookie" });
161+ .ErrorMessage = errorMessage << " Requested address was not found in the cookie" });
157162 }
158163 const NJson::TJsonValue* jsonExpirationTime = nullptr ;
159164 if (jsonValue.GetValuePointer (" expiration_time" , &jsonExpirationTime)) {
@@ -169,15 +174,15 @@ TRestoreOidcContextResult RestoreSessionStoredOnClientSide(const TString& state,
169174 } else {
170175 return TRestoreOidcContextResult ({.IsSuccess = false ,
171176 .IsErrorRetryable = true ,
172- .ErrorMessage = errorMessage << " Expiration time not found in json" }, TContext (state, redirectUrl));
177+ .ErrorMessage = errorMessage << " Expiration time was not found in the json" }, TContext (state, redirectUrl));
173178 }
174179 const NJson::TJsonValue* jsonAjaxRequest = nullptr ;
175180 if (jsonValue.GetValuePointer (" ajax_request" , &jsonAjaxRequest)) {
176181 isAjaxRequest = jsonAjaxRequest->GetBooleanRobust ();
177182 } else {
178183 return TRestoreOidcContextResult ({.IsSuccess = false ,
179184 .IsErrorRetryable = true ,
180- .ErrorMessage = errorMessage << " Can not detect ajax request" }, TContext (state, redirectUrl));
185+ .ErrorMessage = errorMessage << " Cannot detect ajax request" }, TContext (state, redirectUrl));
181186 }
182187 }
183188 if (expectedState.Empty () || expectedState != state) {
0 commit comments