diff --git a/src/auth/service.py b/src/auth/service.py index c8fa3b3..fc3cd4c 100644 --- a/src/auth/service.py +++ b/src/auth/service.py @@ -9,6 +9,7 @@ import requests from typing import Annotated, Any from joserfc import jwt +from joserfc.errors import ExpiredTokenError from joserfc.jwk import KeySet from urllib.request import urlopen @@ -46,7 +47,10 @@ async def get_current_user(oidc_auth_string: oidc_dependency) -> dict[str, Any]: claims_requests = jwt.JWTClaimsRegistry(**claims_options) - claims_requests.validate(token.claims) + try: + claims_requests.validate(token.claims) + except ExpiredTokenError as e: + raise HTTPException(status_code=401, detail="Token expired") db_id = await add_user_to_db(token.claims)