From 20874992027b88b78c4823ae39caf74cdd35080d Mon Sep 17 00:00:00 2001
From: Sukalpo Mitra <sukalpomitra@Sukalpos-MacBook-Pro.local>
Date: Sat, 2 Dec 2023 21:25:31 +0800
Subject: [PATCH] Switched off Jwt header authentication by default

---
 .../util/filter/JwtBasedSecurityFilter.java        | 14 ++++++++++++++
 docs-web/src/main/webapp/WEB-INF/web.xml           |  4 ++++
 2 files changed, 18 insertions(+)

diff --git a/docs-web-common/src/main/java/com/sismics/util/filter/JwtBasedSecurityFilter.java b/docs-web-common/src/main/java/com/sismics/util/filter/JwtBasedSecurityFilter.java
index ed2eefa4..49d1c14b 100644
--- a/docs-web-common/src/main/java/com/sismics/util/filter/JwtBasedSecurityFilter.java
+++ b/docs-web-common/src/main/java/com/sismics/util/filter/JwtBasedSecurityFilter.java
@@ -17,6 +17,7 @@ import jakarta.json.Json;
 import jakarta.json.JsonArray;
 import jakarta.json.JsonObject;
 import jakarta.json.JsonReader;
+import jakarta.servlet.FilterConfig;
 import jakarta.servlet.http.HttpServletRequest;
 import okhttp3.Request;
 import okhttp3.Response;
@@ -47,9 +48,22 @@ public class JwtBasedSecurityFilter extends SecurityFilter {
      * Name of the header used to store the authentication token.
      */
     public static final String HEADER_NAME = "Authorization";
+    /**
+     * True if this authentication method is enabled.
+     */
+    private boolean enabled;
+
+    @Override
+    public void init(FilterConfig filterConfig) {
+        enabled = Boolean.parseBoolean(filterConfig.getInitParameter("enabled"))
+                || Boolean.parseBoolean(System.getProperty("docs.jwt_authentication"));
+    }
 
     @Override
     protected User authenticate(final HttpServletRequest request) {
+        if (!enabled) {
+            return null;
+        }
         log.info("Jwt authentication started");
         User user = null;
         String token = extractAuthToken(request).replace("Bearer ", "");
diff --git a/docs-web/src/main/webapp/WEB-INF/web.xml b/docs-web/src/main/webapp/WEB-INF/web.xml
index e5c06e24..fb119040 100644
--- a/docs-web/src/main/webapp/WEB-INF/web.xml
+++ b/docs-web/src/main/webapp/WEB-INF/web.xml
@@ -48,6 +48,10 @@
     <filter-name>jwtBasedSecurityFilter</filter-name>
     <filter-class>com.sismics.util.filter.JwtBasedSecurityFilter</filter-class>
     <async-supported>true</async-supported>
+    <init-param>
+      <param-name>enabled</param-name>
+      <param-value>false</param-value>
+    </init-param>
   </filter>
 
   <filter>