Strolch
/
strolch
mirror of https://github.com/strolch-li/strolch.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[Fix] handle missing fields in WebSocket auth

This commit is contained in:
Robert von Burg 2020-05-27 18:04:27 +02:00
parent 6caefd2132
commit 60fdb34150
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
li.strolch.websocket/src/main/java/li/strolch/websocket/WebSocketClient.java
View File

@ -153,6 +153,12 @@ public class WebSocketClient implements MessageHandler.Whole<String> {
String authToken = jsonObject.get("authToken").getAsString();
String username = jsonObject.get("username").getAsString();
if (authToken.isEmpty() || username.isEmpty()) {
logger.error("Received invalid authentication request: " + jsonObject.toString());
close(CloseReason.CloseCodes.UNEXPECTED_CONDITION, "Invalid authentication");
return;
}
try {
this.certificate = this.sessionHandler.validate(authToken, this.remoteIp);
if (!this.certificate.getUsername().equals(username)) {