fix: JwtUtils#validateJwtToken does not handle ExpiredJwtException pr…

…operly
eTachkaMarketplace · Jan 12, 2024 · 66e1515 · 66e1515
1 parent a04167b
commit 66e1515
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java b/src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java
@@ -2,6 +2,7 @@
 
 import com.sellbycar.marketplace.user.UserDetailsImpl;
 import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.ExpiredJwtException;
 import io.jsonwebtoken.Jwts;
 import io.jsonwebtoken.SignatureAlgorithm;
 import io.jsonwebtoken.io.Decoders;
@@ -85,6 +86,7 @@ public boolean validateJwtToken(@NonNull String token, @NonNull Key secret) {
             Jwts.parser().setSigningKey(secret).build().parse(token);
             return true;
         } catch (Exception e) {
+            if (e instanceof ExpiredJwtException) return false;
             logger.error("Failed to validate JWT token", e);
         }