Merge pull request #4673 from jmcrawford45/PS-5386

eat all jwt decode exceptions when not in debug mode
Netflix · Oct 24, 2023 · 3bee5d2 · 3bee5d2
2 parents 59653f0 + 77a9a06
commit 3bee5d2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lemur/auth/service.py b/lemur/auth/service.py
@@ -117,6 +117,10 @@ def decorated_function(*args, **kwargs):
             return dict(message="Token has expired"), 403
         except jwt.InvalidTokenError:
             return dict(message="Token is invalid"), 403
+        except Exception:  # noqa
+            if current_app.config.get("DEBUG", False):
+                raise
+            return dict(message="Failed to decode token"), 403
 
         if "aid" in payload:
             access_key = api_key_service.get(payload["aid"])