From fde476f0a73b535524c5c858a0a6a5d3df38ba11 Mon Sep 17 00:00:00 2001 From: Hafiz Ismail Date: Wed, 3 Feb 2016 19:59:37 +0800 Subject: [PATCH] Added stricter check for edge-case when token is `nil` --- jwtauth.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jwtauth.go b/jwtauth.go index ad3905b..06c440b 100644 --- a/jwtauth.go +++ b/jwtauth.go @@ -117,7 +117,7 @@ func (ja *JwtAuth) Verify(paramAliases ...string) func(chi.Handler) chi.Handler return } - if !token.Valid || token.Method != ja.signer { + if token == nil || !token.Valid || token.Method != ja.signer { err = ErrUnauthorized ctx = ja.SetContext(ctx, token, err) next.ServeHTTPC(ctx, w, r)