fix: coerce malformed profile JSON to OAuthError; add redirect_uri assertion

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-09 08:46:19 -04:00
parent 87aeec5999
commit 2f5da9fc5e
2 changed files with 6 additions and 2 deletions
@@ -241,8 +241,11 @@ async def fetch_user(provider: ResolvedProvider, token: str) -> dict:
    except aiohttp.ClientError as exc:
        raise OAuthError(f"User fetch network error: {exc}") from exc

-    for key in provider.profile_data_path:
-        data = data.get(key, {})
+    try:
+        for key in provider.profile_data_path:
+            data = data.get(key, {})
+    except AttributeError:
+        raise OAuthError(f"Unexpected profile response structure from {provider.type}")

    avatar_field = provider.field_map.get("avatar")
    return {