spotless

OWASP · Aug 26, 2024 · 63c4c63 · 63c4c63
1 parent e5deec1
commit 63c4c63
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/services/identity/src/main/java/com/crapi/config/JwtProvider.java b/services/identity/src/main/java/com/crapi/config/JwtProvider.java
@@ -22,6 +22,7 @@
 import com.nimbusds.jose.jwk.JWK;
 import com.nimbusds.jose.jwk.JWKSet;
 import com.nimbusds.jose.jwk.RSAKey;
+import com.nimbusds.jwt.JWT;
 import com.nimbusds.jwt.JWTParser;
 import com.nimbusds.jwt.PlainJWT;
 import com.nimbusds.jwt.SignedJWT;
@@ -142,9 +143,10 @@ private String getJwtSecret(JWSHeader header) throws JOSEException {
    * @return validate token expire and true boolean
    */
   public boolean validateJwtToken(String authToken) {
+    JWT jwt = null;
     try {
-      if (JWTParser.parse(authToken) instanceof PlainJWT) return true;
-      SignedJWT signedJWT = SignedJWT.parse(authToken);
+      jwt = JWTParser.parse(authToken);
+      SignedJWT signedJWT = (SignedJWT) jwt;
       JWSHeader header = signedJWT.getHeader();
       Algorithm alg = header.getAlgorithm();
 
@@ -171,6 +173,7 @@ public boolean validateJwtToken(String authToken) {
       }
 
     } catch (ParseException e) {
+      if (jwt instanceof PlainJWT) return true;
       logger.error("Could not parse JWT Token -> Message: %d", e);
     } catch (JOSEException e) {
       logger.error("RSA JWK Extraction failed -> Message: %d", e);