Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2026-02-05 14:19:18 +01:00
Code Issues Packages Projects Releases Activity

Remove exception from api key verification

Browse Source 
This removes repeated exceptions from the api key service when checking requests without an api key. Despite of throwing an exception, the service now simply returns `null`, when the authentication was not successful.

Pushed-by: Rene Pfeuffer<rene.pfeuffer@cloudogu.com>
Co-authored-by: René Pfeuffer<rene.pfeuffer@cloudogu.com>
This commit is contained in:
Rene Pfeuffer
2023-11-21 08:13:07 +01:00
parent 77a285063e
commit 14f1cb0218
4 changed files with 16 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scm-webapp/src/main/java/sonia/scm/security/ApiKeyRealm.java
View File

@@ -85,8 +85,9 @@ public class ApiKeyRealm extends AuthenticatingRealm {
token instanceof BearerToken || token instanceof UsernamePasswordToken,
"%s is required", BearerToken.class);
String password = getPassword(token);
ApiKeyService.CheckResult check = apiKeyService.check(password);
return buildAuthenticationInfo(token, check);
return apiKeyService.check(password)
.map(check -> buildAuthenticationInfo(token, check))
.orElse(null);
}
private AuthenticationInfo buildAuthenticationInfo(AuthenticationToken token, ApiKeyService.CheckResult check) {

6
scm-webapp/src/main/java/sonia/scm/security/ApiKeyService.java
View File

@@ -43,6 +43,7 @@ import sonia.scm.user.UserPermissions;
import javax.inject.Inject;
import java.security.SecureRandom;
import java.util.Collection;
import java.util.Optional;
import java.util.concurrent.locks.Lock;
import java.util.concurrent.locks.ReadWriteLock;
import java.util.function.Supplier;
@@ -127,9 +128,8 @@ public class ApiKeyService {
});
}
CheckResult check(String tokenAsString) {
return check(tokenHandler.readToken(tokenAsString)
.orElseThrow(AuthorizationException::new));
Optional<CheckResult> check(String tokenAsString) {
return tokenHandler.readToken(tokenAsString).map(this::check);
}
private CheckResult check(ApiKeyTokenHandler.Token token) {