7x31
/
databasir
mirror of https://github.com/vran-dev/databasir.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: use hard-code secret

This commit is contained in:
vran 2022-04-18 08:58:16 +08:00
parent 6b6a7f4e40
commit dfaa55b713
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
api/src/main/resources/application.properties
View File

@ -12,3 +12,4 @@ spring.flyway.baseline-on-migrate=true
spring.flyway.locations=classpath:db/migration spring.flyway.locations=classpath:db/migration
# driver directory # driver directory
databasir.db.driver-directory=drivers databasir.db.driver-directory=drivers
databasir.jwt.secret=${random.uuid}

8
core/src/main/java/com/databasir/core/infrastructure/jwt/JwtTokens.java
View File

@ -5,6 +5,7 @@ import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.exceptions.JWTVerificationException; import com.auth0.jwt.exceptions.JWTVerificationException;
import com.auth0.jwt.interfaces.JWTVerifier; import com.auth0.jwt.interfaces.JWTVerifier;
import lombok.extern.slf4j.Slf4j; import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.stereotype.Component; import org.springframework.stereotype.Component;
import java.time.Instant; import java.time.Instant;
@ -23,10 +24,11 @@ public class JwtTokens {
private static final String ISSUER = "Databasir"; private static final String ISSUER = "Databasir";
private static final String SECRET = "Databasir2022"; @Value("${databasir.jwt.secret}")
private String tokenSecret;
public String accessToken(String username) { public String accessToken(String username) {
Algorithm algorithm = Algorithm.HMAC256(SECRET); Algorithm algorithm = Algorithm.HMAC256(tokenSecret);
return JWT.create() return JWT.create()
.withExpiresAt(new Date(new Date().getTime() + ACCESS_EXPIRE_TIME)) .withExpiresAt(new Date(new Date().getTime() + ACCESS_EXPIRE_TIME))
@ -36,7 +38,7 @@ public class JwtTokens {
} }
public boolean verify(String token) { public boolean verify(String token) {
JWTVerifier verifier = JWT.require(Algorithm.HMAC256(SECRET)) JWTVerifier verifier = JWT.require(Algorithm.HMAC256(tokenSecret))
.withIssuer(ISSUER) .withIssuer(ISSUER)
.build(); .build();
try { try {