Merge pull request #1300 from authts/fix-1299

explicitly throw an error when crypto.subtle is undefined
authts · Dec 14, 2023 · 7ba6b72 · 7ba6b72
2 parents 9380b18 + 287a433
commit 7ba6b72
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/utils/CryptoUtils.ts b/src/utils/CryptoUtils.ts
@@ -38,6 +38,10 @@ export class CryptoUtils {
      * PKCE: Generate a code challenge
      */
     public static async generateCodeChallenge(code_verifier: string): Promise<string> {
+        if (!crypto.subtle) {
+            throw new Error("Crypto.subtle is available only in secure contexts (HTTPS).");
+        }
+
         try {
             const encoder = new TextEncoder();
             const data = encoder.encode(code_verifier);