Handle front token checks behind context path
This commit is contained in:
@@ -46,7 +46,17 @@ public class JwtAuthenticationTokenFilter extends OncePerRequestFilter
|
||||
|
||||
private boolean isFrontRequest(HttpServletRequest request)
|
||||
{
|
||||
return request.getRequestURI() != null && request.getRequestURI().startsWith("/front/");
|
||||
String requestUri = request.getRequestURI();
|
||||
if (requestUri == null)
|
||||
{
|
||||
return false;
|
||||
}
|
||||
String contextPath = request.getContextPath();
|
||||
if (StringUtils.isNotEmpty(contextPath) && requestUri.startsWith(contextPath))
|
||||
{
|
||||
requestUri = requestUri.substring(contextPath.length());
|
||||
}
|
||||
return requestUri.startsWith("/front/");
|
||||
}
|
||||
|
||||
private boolean isTokenAllowedForRequest(LoginUser loginUser, HttpServletRequest request)
|
||||
|
||||
Reference in New Issue
Block a user