diff --git a/slices/micropub/action.rb b/slices/micropub/action.rb index 7b86f23..b745c10 100644 --- a/slices/micropub/action.rb +++ b/slices/micropub/action.rb @@ -74,6 +74,8 @@ module Micropub }) decoded_response = URI.decode_www_form(resp.body).to_h.transform_keys(&:to_sym) + logger.info({log: "verify_response", msg: decoded_response.inspect}) + halt 401 unless (decoded_response.include? :scope) && (decoded_response.include? :me) decoded_response[:scope].gsub("post", "create").split.map(&:to_sym)