rfc6750 compability

auth0 · Nov 26, 2015 · 5b279cc · 5b279cc
1 parent e18c39a
commit 5b279cc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/nginx-jwt.lua b/nginx-jwt.lua
@@ -113,8 +113,8 @@ function M.auth(claim_specs)
             ngx.log(ngx.WARN, "User did not satisfy claim: ".. blocking_claim)
 
             -- https://tools.ietf.org/html/rfc6750#section-3.1
-            if claim == "scope" then
-                ngx.header["WWW-Authenticate"] = 'Bearer error="insufficient_scope",' .. claim .. '=' .. spec
+            if blocking_claim == "scope" then
+                ngx.header["WWW-Authenticate"] = 'Bearer error="insufficient_scope",' .. blocking_claim .. '=' .. blocking_spec
                 ngx.exit(ngx.HTTP_FORBIDDEN)
             end
             ngx.exit(ngx.HTTP_UNAUTHORIZED)