From 66e15151a5ad6c0c19b555cdd124cc01e2f24eaa Mon Sep 17 00:00:00 2001 From: Shorinami Date: Fri, 12 Jan 2024 17:20:54 +0200 Subject: [PATCH] fix: JwtUtils#validateJwtToken does not handle ExpiredJwtException properly --- src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java b/src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java index 871ccd9..9da40fe 100644 --- a/src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java +++ b/src/main/java/com/sellbycar/marketplace/auth/JwtUtils.java @@ -2,6 +2,7 @@ import com.sellbycar.marketplace.user.UserDetailsImpl; import io.jsonwebtoken.Claims; +import io.jsonwebtoken.ExpiredJwtException; import io.jsonwebtoken.Jwts; import io.jsonwebtoken.SignatureAlgorithm; import io.jsonwebtoken.io.Decoders; @@ -85,6 +86,7 @@ public boolean validateJwtToken(@NonNull String token, @NonNull Key secret) { Jwts.parser().setSigningKey(secret).build().parse(token); return true; } catch (Exception e) { + if (e instanceof ExpiredJwtException) return false; logger.error("Failed to validate JWT token", e); }