| @@ -541,9 +541,9 @@ | ||
| 541 | 541 | throw new Exception( esc_html__( 'Invalid response data.', 'defender-security' ) ); |
| 542 | 542 | } |
| 543 | 543 | |
| 544 | 544 | $decoded_response = json_decode( $response_data, true ); |
| 545 | - if ( ! is_array( $decoded_response ) || empty( $decoded_response['rawId'] ) ) { | |
| 545 | + if ( ! is_array( $decoded_response ) || ! isset( $decoded_response['rawId'] ) || ! is_string( $decoded_response['rawId'] ) || '' === $decoded_response['rawId'] ) { | |
| 546 | 546 | throw new Exception( esc_html__( 'Invalid assertion payload.', 'defender-security' ) ); |
| 547 | 547 | } |
| 548 | 548 | |
| 549 | 549 | $credential_id = $this->base64url_decode( $decoded_response['rawId'] ); |