fix: sanitize JWT error to prevent JWKS URL leak in 403 response

2026-09-05 00:31:37 -07:00
parent 11ca4a5902
commit 4463508f29
1 changed files with 1 additions and 1 deletions
@@ -323,7 +323,7 @@ func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 			writeProblemDetail(w, http.StatusForbidden,
 				"https://api.example.com/problems/forbidden",
 				"Forbidden",
-				fmt.Sprintf("JWT validation failed: %v", err),
+				"JWT validation failed",
 				nil)
 			logging.Errorf("auth failed", err, map[string]string{
 				"path": r.URL.Path,