From b9f2d2f6c53f43d91936eb6e04b0e7a2f9a840d0 Mon Sep 17 00:00:00 2001 From: OZGCloud <ozgcloud@mgm-tp.com> Date: Wed, 9 Oct 2024 16:43:36 +0200 Subject: [PATCH] OZG-6858 add logging; move method --- .../nachrichten/antragraum/AntragraumService.java | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/nachrichten-manager-server/src/main/java/de/ozgcloud/nachrichten/antragraum/AntragraumService.java b/nachrichten-manager-server/src/main/java/de/ozgcloud/nachrichten/antragraum/AntragraumService.java index 985b7df..bbb328c 100644 --- a/nachrichten-manager-server/src/main/java/de/ozgcloud/nachrichten/antragraum/AntragraumService.java +++ b/nachrichten-manager-server/src/main/java/de/ozgcloud/nachrichten/antragraum/AntragraumService.java @@ -164,21 +164,22 @@ public class AntragraumService { return nachricht; } + void verifyToken(String token) { + var errors = verifier.verify(token); + if (CollectionUtils.isNotEmpty(errors)) { + throw new SecurityException("SAML Token verification failed. Errors: %s".formatted(errors)); + } + } + void verifyPostfachId(String samlToken, PostfachNachricht nachricht) { var vorgang = vorgangService.getVorgang(nachricht.getVorgangId()); if (!StringUtils.equals(vorgang.getPostfachId(), getPostfachId(samlToken))) { + LOG.info("PostfachId in token is not matching postfachId in vorgang."); throw new NotFoundException(GenericId.from(nachricht.getId()), "PostfachNachricht"); } } - void verifyToken(String token) { - var errors = verifier.verify(token); - if (CollectionUtils.isNotEmpty(errors)) { - throw new SecurityException("SAML Token verification failed. Errors: %s".formatted(errors)); - } - } - public boolean isAccessible(String samlToken, String trustLevel) { return getTrustLevel(samlToken).getIntValue() >= TrustLevel.fromString(trustLevel).getIntValue(); } -- GitLab