From bdf9da8bab3d6c65b52f67904d001d9b81e1c9fc Mon Sep 17 00:00:00 2001 From: Sergey Matvienko Date: Fri, 19 Apr 2024 09:42:06 +0200 Subject: [PATCH] Revert "Jwts.parser().build() refactored for a newer version" This reverts commit 1f5c95a375ab694ff08709cf9096dd773e0b90c7. --- .../server/service/security/model/token/JwtTokenFactory.java | 3 +-- .../service/security/model/token/OAuth2AppTokenFactory.java | 2 +- .../org/thingsboard/server/controller/AbstractWebTest.java | 2 +- 3 files changed, 3 insertions(+), 4 deletions(-) diff --git a/application/src/main/java/org/thingsboard/server/service/security/model/token/JwtTokenFactory.java b/application/src/main/java/org/thingsboard/server/service/security/model/token/JwtTokenFactory.java index 7270398c25..08622f578a 100644 --- a/application/src/main/java/org/thingsboard/server/service/security/model/token/JwtTokenFactory.java +++ b/application/src/main/java/org/thingsboard/server/service/security/model/token/JwtTokenFactory.java @@ -183,7 +183,7 @@ public class JwtTokenFactory { UserPrincipal principal = securityUser.getUserPrincipal(); - Claims claims = Jwts.claims().setSubject(principal.getValue()).build(); + Claims claims = Jwts.claims().setSubject(principal.getValue()); claims.put(USER_ID, securityUser.getId().getId().toString()); claims.put(SCOPES, scopes); if (securityUser.getSessionId() != null) { @@ -204,7 +204,6 @@ public class JwtTokenFactory { try { return Jwts.parser() .setSigningKey(jwtSettingsService.getJwtSettings().getTokenSigningKey()) - .build() .parseClaimsJws(token); } catch (UnsupportedJwtException | MalformedJwtException | IllegalArgumentException ex) { log.debug("Invalid JWT Token", ex); diff --git a/application/src/main/java/org/thingsboard/server/service/security/model/token/OAuth2AppTokenFactory.java b/application/src/main/java/org/thingsboard/server/service/security/model/token/OAuth2AppTokenFactory.java index dd30e4bc28..7f956f6970 100644 --- a/application/src/main/java/org/thingsboard/server/service/security/model/token/OAuth2AppTokenFactory.java +++ b/application/src/main/java/org/thingsboard/server/service/security/model/token/OAuth2AppTokenFactory.java @@ -40,7 +40,7 @@ public class OAuth2AppTokenFactory { public String validateTokenAndGetCallbackUrlScheme(String appPackage, String appToken, String appSecret) { Jws jwsClaims; try { - jwsClaims = Jwts.parser().setSigningKey(appSecret).build().parseClaimsJws(appToken); + jwsClaims = Jwts.parser().setSigningKey(appSecret).parseClaimsJws(appToken); } catch (UnsupportedJwtException | MalformedJwtException | IllegalArgumentException | SignatureException ex) { throw new IllegalArgumentException("Invalid Application token: ", ex); diff --git a/application/src/test/java/org/thingsboard/server/controller/AbstractWebTest.java b/application/src/test/java/org/thingsboard/server/controller/AbstractWebTest.java index 89d35f0756..e14b041e62 100644 --- a/application/src/test/java/org/thingsboard/server/controller/AbstractWebTest.java +++ b/application/src/test/java/org/thingsboard/server/controller/AbstractWebTest.java @@ -563,7 +563,7 @@ public abstract class AbstractWebTest extends AbstractInMemoryStorageTest { int i = token.lastIndexOf('.'); Assert.assertTrue(i > 0); String withoutSignature = token.substring(0, i + 1); - Jwt jwsClaims = Jwts.parser().build().parseClaimsJwt(withoutSignature); + Jwt jwsClaims = Jwts.parser().parseClaimsJwt(withoutSignature); Claims claims = jwsClaims.getBody(); String subject = claims.getSubject(); Assert.assertEquals(username, subject);