Make sure to consume HTTP error response bodies (#1173)

Co-authored-by: Eduardo Gomes <egomes@cloudflare.com>
Co-authored-by: Felix Weinberger <fweinberger@anthropic.com>
Co-authored-by: Felix Weinberger <3823880+felixweinberger@users.noreply.github.com>
This commit is contained in:
Eduardo Gomes 2025-11-26 16:52:56 +01:00 • committed by GitHub
commit 466483f25d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -84,6 +84,7 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
},
body: params.toString()
});
await response.body?.cancel();
if (!response.ok) {
throw new ServerError(`Token revocation failed: ${response.status}`);
@ -107,6 +108,7 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
});
if (!response.ok) {
await response.body?.cancel();
throw new ServerError(`Client registration failed: ${response.status}`);
}
@ -181,6 +183,7 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
});
if (!response.ok) {
await response.body?.cancel();
throw new ServerError(`Token exchange failed: ${response.status}`);
}
@ -221,6 +224,7 @@ export class ProxyOAuthServerProvider implements OAuthServerProvider {
});
if (!response.ok) {
await response.body?.cancel();
throw new ServerError(`Token refresh failed: ${response.status}`);
}