java decodetoken_Java DecodedJWT.getClaim方法代码示例

import com.auth0.jwt.interfaces.DecodedJWT; //导入方法依赖的package包/类

@Override

public Authentication authenticate(Authentication auth) throws AuthenticationException {

JWTAuthenticationToken authentication = (JWTAuthenticationToken) auth;

if(authentication.getCredentials() == null || !(authentication.getCredentials() instanceof String)) {

logger.error("Credentials not present");

return null;

}

String rawToken = (String) auth.getCredentials();

DecodedJWT token = JWTSecurityService.verify(jwtKey, rawToken);

Claim path = token.getClaim(JWTSecurityService.CLAIM_PATH);

authentication.setAuthenticated(true);

// TODO:AD This is super unfortunate, but not sure there is a better way when using JSP

if(StringUtils.contains(authentication.getRequestedPath(), "/WEB-INF/jsp/")) {

logger.warn("BYPASSING AUTH FOR WEB-INF page");

} else

if(!roughlyEqual(path.asString(), authentication.getRequestedPath())) {

throw new InsufficientAuthenticationException("Credentials not valid for path " + authentication

.getRequestedPath() + ". They are valid for " + path.asString());

}

List authorities = new ArrayList<>();

authorities.add(new SimpleGrantedAuthority("IS_AUTHENTICATED_FULLY"));

authorities.add(new SimpleGrantedAuthority("ROLE_TEMP"));

return new JWTAuthenticationToken(authorities, rawToken, authentication.getRequestedPath());

}