From 151ec7e14ba83445849c9d25b8ae0c2623e499b5 Mon Sep 17 00:00:00 2001
From: Sebastian Stehle <sebastian@squidex.io>
Date: Wed, 19 Apr 2017 20:20:26 +0200
Subject: [PATCH] Minor improvement in AppFilterAttibute when invalid token is
 sent.

---
 src/Squidex/Pipeline/AppFilterAttribute.cs | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/Squidex/Pipeline/AppFilterAttribute.cs b/src/Squidex/Pipeline/AppFilterAttribute.cs
index 38fd2a890..9c41678cd 100644
--- a/src/Squidex/Pipeline/AppFilterAttribute.cs
+++ b/src/Squidex/Pipeline/AppFilterAttribute.cs
@@ -84,12 +84,14 @@ namespace Squidex.Pipeline
         {
             var clientId = user.FindFirst(OpenIdClaims.ClientId)?.Value;
 
-            if (clientId == null)
+            var clientIdParts = clientId?.Split(':');
+
+            if (clientIdParts?.Length != 2)
             {
                 return null;
             }
 
-            clientId = clientId.Split(':')[1];
+            clientId = clientIdParts[1];
 
             var contributor = app.Clients.FirstOrDefault(x => string.Equals(x.Id, clientId, StringComparison.OrdinalIgnoreCase));