Skip to content

Commit 11f7539

Browse files
NFC-118 Only accept signing certificate fields for web-eid:1.1 tokens
Signed-off-by: Sander Kondratjev <sander.kondratjev@nortal.com>
1 parent 3b7e3a6 commit 11f7539

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

example/src/main/java/eu/webeid/example/security/WebEidAuthenticationProvider.java

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -76,10 +76,11 @@ public Authentication authenticate(Authentication auth) throws AuthenticationExc
7676
try {
7777
final String nonce = challengeNonceStore.getAndRemove().getBase64EncodedNonce();
7878
final X509Certificate userCertificate = tokenValidator.validate(authToken, nonce);
79-
final String signingCertificate = requireSigningCert
79+
boolean isV11 = authToken.getFormat() != null && authToken.getFormat().startsWith("web-eid:1.1");
80+
final String signingCertificate = (requireSigningCert && isV11)
8081
? authToken.getUnverifiedSigningCertificate()
8182
: null;
82-
final List<SupportedSignatureAlgorithm> supportedSignatureAlgorithms = requireSigningCert
83+
final List<SupportedSignatureAlgorithm> supportedSignatureAlgorithms = (requireSigningCert && isV11)
8384
? authToken.getSupportedSignatureAlgorithms()
8485
: null;
8586

0 commit comments

Comments
 (0)