Verify webid provider when extracting webid from claim

Author: dmitrizagidulin

lib/api/authn/webid-oidc.js

@@ -40,11 +40,15 @@ function initialize (app, argv) {
 
   // Expose session.userId
   app.use('/', (req, res, next) => {
-    const userId = oidc.webIdFromClaims(req.claims)
-    if (userId) {
-      req.session.userId = userId
-    }
-    next()
+    oidc.webIdFromClaims(req.claims)
+      .then(webId => {
+        if (webId) {
+          req.session.userId = webId
+        }
+
+        next()
+      })
+      .catch(next)
   })
 }
 

package-lock.json

@@ -59,7 +59,7 @@
     "node-forge": "^0.6.38",
     "nodemailer": "^3.1.4",
     "nomnom": "^1.8.1",
-    "oidc-auth-manager": "^0.9.0",
+    "oidc-auth-manager": "^0.10.0",
     "oidc-op-express": "^0.0.3",
     "rdflib": "^0.15.0",
     "recursive-readdir": "^2.1.0",