corrected api key logic

This commit is contained in:
Dario Ghunney Ware 2025-08-06 12:07:38 +01:00
parent ddac966485
commit f7547d063e

View File

@ -122,6 +122,7 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
if (apiKey != null && !apiKey.isBlank()) { if (apiKey != null && !apiKey.isBlank()) {
try { try {
Optional<User> user = userService.getUserByApiKey(apiKey); Optional<User> user = userService.getUserByApiKey(apiKey);
if (user.isEmpty()) { if (user.isEmpty()) {
handleAuthenticationFailure( handleAuthenticationFailure(
request, request,
@ -129,10 +130,12 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
new AuthenticationFailureException("Invalid API Key")); new AuthenticationFailureException("Invalid API Key"));
return false; return false;
} }
authentication = authentication =
new ApiKeyAuthenticationToken( new ApiKeyAuthenticationToken(
user.get(), apiKey, user.get().getAuthorities()); user.get(), apiKey, user.get().getAuthorities());
SecurityContextHolder.getContext().setAuthentication(authentication); SecurityContextHolder.getContext().setAuthentication(authentication);
return true;
} catch (AuthenticationException e) { } catch (AuthenticationException e) {
handleAuthenticationFailure( handleAuthenticationFailure(
request, request,
@ -141,6 +144,7 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
return false; return false;
} }
} }
return false; return false;
} }