inteligr8/alfresco-keycloak
1
0
Fork 0
mirror of https://github.com/bmlong137/alfresco-keycloak.git synced 2025-09-10 14:11:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

More flexible 'freshLogin' handling on Bearer token

Browse Source
This commit is contained in:
AFaust
2020-02-18 01:33:34 +01:00
parent 0fa088f49d
commit 8037689598
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
repository/src/main/java/de/acosix/alfresco/keycloak/repo/authentication/KeycloakAuthenticationFilter.java
View File

@@ -665,7 +665,10 @@ public class KeycloakAuthenticationFilter extends BaseAuthenticationFilter
LOGGER.trace(
"Skipping processKeycloakAuthenticationAndActions as Bearer authorization header for {} has already been processed by remote user mapper",
AlfrescoCompatibilityUtil.maskUsername(accessToken.getPreferredUsername()));
this.keycloakAuthenticationComponent.handleUserTokens(accessToken, accessToken, session.isNew());
// cannot rely on session.isNew() to determine if this is a fresh login
// consider "fresh" login if issued in the last second (implicitly include any token refreshes performed client-side)
final boolean isFreshLogin = accessToken.getIssuedAt() * 1000l < (System.currentTimeMillis() - 1000);
this.keycloakAuthenticationComponent.handleUserTokens(accessToken, accessToken, isFreshLogin);
// sessionUser should be guaranteed here, but still check - we need it for the cache key
if (sessionUser != null)