From e4941d80aedecb2c4c641a916acbb077ea91fc4b Mon Sep 17 00:00:00 2001 From: Vitaly Takmazov Date: Tue, 10 Jan 2023 16:54:33 +0300 Subject: Start using HttpHeaders class instead of string constants --- .../com/juick/service/security/BearerTokenAuthenticationFilter.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src/main/java/com/juick/service/security/BearerTokenAuthenticationFilter.java') diff --git a/src/main/java/com/juick/service/security/BearerTokenAuthenticationFilter.java b/src/main/java/com/juick/service/security/BearerTokenAuthenticationFilter.java index f4e73b12..e5fdd738 100644 --- a/src/main/java/com/juick/service/security/BearerTokenAuthenticationFilter.java +++ b/src/main/java/com/juick/service/security/BearerTokenAuthenticationFilter.java @@ -28,6 +28,7 @@ import jakarta.servlet.http.HttpServletResponse; import org.apache.commons.lang3.StringUtils; import org.slf4j.Logger; import org.slf4j.LoggerFactory; +import org.springframework.http.HttpHeaders; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; import org.springframework.security.core.Authentication; import org.springframework.security.core.context.SecurityContextHolder; @@ -58,7 +59,7 @@ public class BearerTokenAuthenticationFilter extends BaseAuthenticationFilter { var headers = Collections.list(request.getHeaderNames()) .stream() .collect(Collectors.toMap(String::toLowerCase, request::getHeader)); - var authorizationHeaderValue = headers.get("authorization"); + var authorizationHeaderValue = headers.get(HttpHeaders.AUTHORIZATION.toLowerCase()); if (StringUtils.isNotEmpty(authorizationHeaderValue) && authorizationHeaderValue.startsWith("Bearer")) { String token = authorizationHeaderValue.substring(7); try { -- cgit v1.2.3