Merge pull request moby#2062 from earthly/corey/fix-stale-tokens

Remove potentially expired tokens
aaronlehmann · Apr 26, 2021 · aa8c1ba · aa8c1ba
2 parents f113b49 + 9b7a5fc
commit aa8c1ba
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/util/resolver/authorizer.go b/util/resolver/authorizer.go
@@ -400,6 +400,11 @@ func (ah *authHandler) fetchToken(ctx context.Context, sm *session.Manager, g se
 }
 
 func invalidAuthorization(c auth.Challenge, responses []*http.Response) error {
+	lastResponse := responses[len(responses)-1]
+	if lastResponse.StatusCode == http.StatusUnauthorized {
+		return errors.Wrapf(docker.ErrInvalidAuthorization, "authorization status: %v", lastResponse.StatusCode)
+	}
+
 	errStr := c.Parameters["error"]
 	if errStr == "" {
 		return nil