authInfo := a.GetAuthInfo(tlsConnection, headers.NewGRPCHeaderGetter(ctx), func() string {
return a.audienceGetter.Audience(ctx, req, info)
}
})
var claims *Claims
if authInfo != nil {
claims, err = a.GetClaims(authInfo)
if err != nil {
a.logger.Error("Authorization error", tag.Error(err))
// return a generic error to the caller without disclosing details
return nil, errUnauthorized
}
}