Browse Source

ensure JwtAuthenticationProvider.authenticate returns not null Authentication

Signed-off-by: alfonsoristorato <alfonsoristorato@gmail.com>
pull/18305/head
alfonsoristorato 5 days ago
parent
commit
7abc1ae8dc
  1. 4
      oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/authentication/JwtAuthenticationProvider.java

4
oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/authentication/JwtAuthenticationProvider.java

@ -21,6 +21,8 @@ import java.util.Collection;
import org.apache.commons.logging.Log; import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory; import org.apache.commons.logging.LogFactory;
import org.jspecify.annotations.NonNull;
import org.springframework.core.convert.converter.Converter; import org.springframework.core.convert.converter.Converter;
import org.springframework.security.authentication.AbstractAuthenticationToken; import org.springframework.security.authentication.AbstractAuthenticationToken;
import org.springframework.security.authentication.AuthenticationProvider; import org.springframework.security.authentication.AuthenticationProvider;
@ -83,7 +85,7 @@ public final class JwtAuthenticationProvider implements AuthenticationProvider {
* @throws AuthenticationException if authentication failed for some reason * @throws AuthenticationException if authentication failed for some reason
*/ */
@Override @Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException { public @NonNull Authentication authenticate(Authentication authentication) throws AuthenticationException {
BearerTokenAuthenticationToken bearer = (BearerTokenAuthenticationToken) authentication; BearerTokenAuthenticationToken bearer = (BearerTokenAuthenticationToken) authentication;
Jwt jwt = getJwt(bearer); Jwt jwt = getJwt(bearer);
AbstractAuthenticationToken token = this.jwtAuthenticationConverter.convert(jwt); AbstractAuthenticationToken token = this.jwtAuthenticationConverter.convert(jwt);

Loading…
Cancel
Save