From 4e00b47b523593ff7dd84a90b850940d8c53f024 Mon Sep 17 00:00:00 2001 From: Krishnan Parthasarathi Date: Thu, 13 Aug 2020 17:05:24 -0700 Subject: [PATCH] licverifier: fail verify if accountId is missing in license metadata (#10258) --- pkg/licverifier/verifier.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/licverifier/verifier.go b/pkg/licverifier/verifier.go index 8b43a48a0..62d246260 100644 --- a/pkg/licverifier/verifier.go +++ b/pkg/licverifier/verifier.go @@ -64,7 +64,7 @@ func NewLicenseVerifier(pemBytes []byte) (*LicenseVerifier, error) { // the claim values are invalid. func toLicenseInfo(claims jwt.MapClaims) (LicenseInfo, error) { accID, ok := claims[accountID].(float64) - if ok && accID <= 0 { + if !ok || ok && accID <= 0 { return LicenseInfo{}, errors.New("Invalid accountId in claims") } email, ok := claims[sub].(string)