added /register to skip filter
This commit is contained in:
@@ -31,11 +31,9 @@ public class JWTAuthorizationFilter extends OncePerRequestFilter {
|
|||||||
|
|
||||||
if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
|
if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
|
||||||
response.setStatus(HttpServletResponse.SC_OK);
|
response.setStatus(HttpServletResponse.SC_OK);
|
||||||
} else if (request.getRequestURI().equalsIgnoreCase("/login")) {
|
} else if (request.getRequestURI().equalsIgnoreCase("/login") || request.getRequestURI().equalsIgnoreCase("/register")) {
|
||||||
filterChain.doFilter(request, response);
|
filterChain.doFilter(request, response);
|
||||||
return;
|
|
||||||
} else {
|
} else {
|
||||||
|
|
||||||
String jwtToken = request.getHeader(SecurityParams.HEADER_NAME);
|
String jwtToken = request.getHeader(SecurityParams.HEADER_NAME);
|
||||||
if (jwtToken == null || !jwtToken.startsWith(SecurityParams.PREFIX)) {
|
if (jwtToken == null || !jwtToken.startsWith(SecurityParams.PREFIX)) {
|
||||||
//throw new RuntimeException("Not Authorized");
|
//throw new RuntimeException("Not Authorized");
|
||||||
|
|||||||
Reference in New Issue
Block a user