vmario/docs
1
0
Fork 0
mirror of https://github.com/sismics/docs.git synced 2024-11-16 11:17:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Switched off Jwt header authentication by default

Browse Source
This commit is contained in:
Sukalpo Mitra 2023-12-02 21:25:31 +08:00
parent 10ff18597d
commit 2087499202
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
docs-web-common/src/main/java/com/sismics/util/filter/JwtBasedSecurityFilter.java
View File

@ -17,6 +17,7 @@ import jakarta.json.Json;
import jakarta.json.JsonArray;
import jakarta.json.JsonObject;
import jakarta.json.JsonReader;
import jakarta.servlet.FilterConfig;
import jakarta.servlet.http.HttpServletRequest;
import okhttp3.Request;
import okhttp3.Response;
@ -47,9 +48,22 @@ public class JwtBasedSecurityFilter extends SecurityFilter {
* Name of the header used to store the authentication token.
*/
public static final String HEADER_NAME = "Authorization";
/**
* True if this authentication method is enabled.
*/
private boolean enabled;
@Override
public void init(FilterConfig filterConfig) {
enabled = Boolean.parseBoolean(filterConfig.getInitParameter("enabled"))
|| Boolean.parseBoolean(System.getProperty("docs.jwt_authentication"));
}
@Override
protected User authenticate(final HttpServletRequest request) {
if (!enabled) {
return null;
}
log.info("Jwt authentication started");
User user = null;
String token = extractAuthToken(request).replace("Bearer ", "");

4
docs-web/src/main/webapp/WEB-INF/web.xml
View File

@ -48,6 +48,10 @@
<filter-name>jwtBasedSecurityFilter</filter-name>
<filter-class>com.sismics.util.filter.JwtBasedSecurityFilter</filter-class>
<async-supported>true</async-supported>
<init-param>
<param-name>enabled</param-name>
<param-value>false</param-value>
</init-param>
</filter>
<filter>