Private key is shown in Error message on invalid pass phrase

[MHC03]

CryptKey.php allows the private key to either be a file or its contents directly. When I pass in the contents and give it the wrong pass phrase the private key is shown through the LogicException message. This might be a security issue.

oauth2-server/src/CryptKey.php

Line 67 in 8ab731e

 throw new LogicException('Unable to read key from file ' . $keyPath); 

[Andrew Millington]

Thanks for this. Great spot. Fixed in PR #1353. Cheers for reporting

[MHC03]

Thank you very much for this quick fix and release!