fix(security): accept overseas token subject identity
This commit is contained in:
+3
@@ -35,6 +35,9 @@ public final class GatewayAccessTokenSessionValidator implements AccessTokenSess
|
||||
throw new IllegalArgumentException("Untrusted overseas gateway authorization context");
|
||||
}
|
||||
Long userId = number(jwt.getClaims().getOrDefault("userId", jwt.getClaims().get("user_id")));
|
||||
if (userId == null) {
|
||||
userId = number(jwt.getSubject());
|
||||
}
|
||||
return new AccessTokenSession(1, userId, values(request.getHeader(ROLES_HEADER)),
|
||||
values(request.getHeader(AUTHORITIES_HEADER)));
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user