Skip to content

Commit

Permalink
Minor update
Browse files Browse the repository at this point in the history
  • Loading branch information
sberyozkin committed May 29, 2024
1 parent 9ae780f commit cac1e30
Show file tree
Hide file tree
Showing 4 changed files with 8 additions and 7 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@ public class UploadResource {

@GET
@RolesAllowed("admin")
@Path("/data")
@Produces(MediaType.APPLICATION_JSON)
public String bearerCertificateCustomValidator() {
return "granted:" + identity.getRoles();
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -15,13 +15,13 @@

@ApplicationScoped
@Unremovable
@TenantFeature("uploads")
@TenantFeature("uploadw")
public class UploadsTokenChainValidator implements TokenCertificateValidator {

@Override
public void validate(OidcTenantConfig oidcConfig, List<X509Certificate> chain, String tokenClaims)
throws CertificateException {
if (!"uploads".equals(oidcConfig.tenantId.get())) {
if (!"uploadw".equals(oidcConfig.tenantId.get())) {
throw new RuntimeException("Unexpected tenant id");
}
String leafCertificateThumbprint = TrustStoreUtils.calculateThumprint(chain.get(0));
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -207,9 +207,9 @@ quarkus.oidc.bearer-certificate-full-chain.certificate-chain.trust-store-passwor
quarkus.oidc.bearer-chain-custom-validator.certificate-chain.trust-store-file=truststore.p12
quarkus.oidc.bearer-chain-custom-validator.certificate-chain.trust-store-password=storepassword

quarkus.oidc.uploads.tenant-paths=/upload/*
quarkus.oidc.uploads.certificate-chain.trust-store-file=truststore.p12
quarkus.oidc.uploads.certificate-chain.trust-store-password=storepassword
quarkus.oidc.uploadw.tenant-paths=/upload/*
quarkus.oidc.uploadw.certificate-chain.trust-store-file=truststore.p12
quarkus.oidc.uploadw.certificate-chain.trust-store-password=storepassword

quarkus.oidc.bearer-certificate-full-chain-root-only-wrongcname.certificate-chain.trust-store-file=truststore-rootcert.p12
quarkus.oidc.bearer-certificate-full-chain-root-only-wrongcname.certificate-chain.trust-store-password=storepassword
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -232,7 +232,7 @@ public void testCertChainWithCustomValidatorUpload() throws Exception {
subjectPrivateKey, true);

RestAssured.given().auth().oauth2(accessToken)
.when().get("/upload")
.when().get("/upload/data")
.then()
.statusCode(200)
.body(Matchers.containsString("admin"));
Expand All @@ -243,7 +243,7 @@ public void testCertChainWithCustomValidatorUpload() throws Exception {
subjectPrivateKey, false);

RestAssured.given().auth().oauth2(accessToken)
.when().get("/upload")
.when().get("/upload/data")
.then()
.statusCode(401);

Expand Down

0 comments on commit cac1e30

Please sign in to comment.