custom header at top level

CDCgov · Oct 10, 2023 · f420a51 · f420a51
1 parent e793f17
commit f420a51
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/shared/src/main/java/gov/hhs/cdc/trustedintermediary/external/jjwt/JjwtEngine.java b/shared/src/main/java/gov/hhs/cdc/trustedintermediary/external/jjwt/JjwtEngine.java
@@ -30,6 +30,7 @@
 public class JjwtEngine implements AuthEngine {
 
     private static final JjwtEngine INSTANCE = new JjwtEngine();
+    private static final String CUSTOM_HEADER = "eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0";
 
     private JjwtEngine() {}
 
@@ -89,7 +90,7 @@ public LocalDateTime getExpirationDate(String jwt) {
         var tokenOnly = jwt.substring(0, jwt.lastIndexOf('.') + 1);
         var claimsOnly = tokenOnly.substring(tokenOnly.indexOf('.'));
         // Passing jwt header with alg:None to satisfy jjwt expectations
-        var customHeaderAndClaims = "eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0" + claimsOnly;
+        var customHeaderAndClaims = CUSTOM_HEADER + claimsOnly;
 
         Claims claims;
         try {