Examples with IncorrectClaimException io.jsonwebtoken.IncorrectClaimException used on opensource projects

Example 1 with IncorrectClaimException

use of io.jsonwebtoken.IncorrectClaimException in project ma-core-public by infiniteautomation.

the class MangoTokenAuthenticationProvider method authenticate.

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    if (!(authentication instanceof BearerAuthenticationToken)) {
        return null;
    }
    String bearerToken = (String) authentication.getCredentials();
    User user;
    Jws<Claims> jws;
    try {
        jws = tokenAuthenticationService.parse(bearerToken);
        user = tokenAuthenticationService.verify(jws);
    } catch (ExpiredJwtException e) {
        throw new CredentialsExpiredException(e.getMessage(), e);
    } catch (UnsupportedJwtException | MalformedJwtException | IllegalArgumentException e) {
        // assume that this is not a JWT, allow the next AuthenticationProvider to process it
        return null;
    } catch (SignatureException | MissingClaimException | IncorrectClaimException e) {
        throw new BadCredentialsException(e.getMessage(), e);
    } catch (NotFoundException e) {
        throw new BadCredentialsException("Invalid username", e);
    } catch (Exception e) {
        throw new InternalAuthenticationServiceException(e.getMessage(), e);
    }
    userDetailsChecker.check(user);
    if (log.isDebugEnabled()) {
        log.debug("Successfully authenticated user using JWT token, header: " + jws.getHeader() + ", body: " + jws.getBody());
    }
    return new PreAuthenticatedAuthenticationToken(user, bearerToken, user.getAuthorities());
}

Example 2 with IncorrectClaimException

use of io.jsonwebtoken.IncorrectClaimException in project jjwt by jwtk.

the class DefaultJwtParser method validateExpectedClaims.

private void validateExpectedClaims(Header header, Claims claims) {
    for (String expectedClaimName : expectedClaims.keySet()) {
        Object expectedClaimValue = normalize(expectedClaims.get(expectedClaimName));
        Object actualClaimValue = normalize(claims.get(expectedClaimName));
        if (expectedClaimValue instanceof Date) {
            try {
                actualClaimValue = claims.get(expectedClaimName, Date.class);
            } catch (Exception e) {
                String msg = "JWT Claim '" + expectedClaimName + "' was expected to be a Date, but its value " + "cannot be converted to a Date using current heuristics.  Value: " + actualClaimValue;
                throw new IncorrectClaimException(header, claims, msg);
            }
        }
        InvalidClaimException invalidClaimException = null;
        if (actualClaimValue == null) {
            String msg = String.format(ClaimJwtException.MISSING_EXPECTED_CLAIM_MESSAGE_TEMPLATE, expectedClaimName, expectedClaimValue);
            invalidClaimException = new MissingClaimException(header, claims, msg);
        } else if (!expectedClaimValue.equals(actualClaimValue)) {
            String msg = String.format(ClaimJwtException.INCORRECT_EXPECTED_CLAIM_MESSAGE_TEMPLATE, expectedClaimName, expectedClaimValue, actualClaimValue);
            invalidClaimException = new IncorrectClaimException(header, claims, msg);
        }
        if (invalidClaimException != null) {
            invalidClaimException.setClaimName(expectedClaimName);
            invalidClaimException.setClaimValue(expectedClaimValue);
            throw invalidClaimException;
        }
    }
}

Example 3 with IncorrectClaimException

use of io.jsonwebtoken.IncorrectClaimException in project ma-core-public by infiniteautomation.

the class JwtSignerVerifier method verifyClaim.

protected void verifyClaim(Jws<Claims> token, String expectedClaimName, Object expectedClaimValue) {
    JwsHeader<?> header = token.getHeader();
    Claims claims = token.getBody();
    Object actualClaimValue = claims.get(expectedClaimName);
    if (actualClaimValue == null) {
        String msg = String.format(ClaimJwtException.MISSING_EXPECTED_CLAIM_MESSAGE_TEMPLATE, expectedClaimName, expectedClaimValue);
        throw new MissingClaimException(header, claims, msg);
    } else if (!expectedClaimValue.equals(actualClaimValue)) {
        String msg = String.format(ClaimJwtException.INCORRECT_EXPECTED_CLAIM_MESSAGE_TEMPLATE, expectedClaimName, expectedClaimValue, actualClaimValue);
        throw new IncorrectClaimException(header, claims, msg);
    }
}