Merge pull request #144 from ben12385/master

Include check that access token was actually successfully returned
jaredhanson · Sep 24, 2021 · 4f8f86c · 4f8f86c
2 parents 86a6ae4 + ec72983
commit 4f8f86c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/strategy.js b/lib/strategy.js
@@ -174,7 +174,7 @@ OAuth2Strategy.prototype.authenticate = function(req, options) {
 
       self._oauth2.getOAuthAccessToken(code, params,
         function(err, accessToken, refreshToken, params) {
-          if (err) { return self.error(self._createOAuthError('Failed to obtain access token', err)); }
+          if (err || !accessToken) { return self.error(self._createOAuthError('Failed to obtain access token', err)); }
 
           self._loadUserProfile(accessToken, function(err, profile) {
             if (err) { return self.error(err); }