diff options
| author | Evgeny Khramtsov <ekhramtsov@process-one.net> | 2019-10-26 11:03:19 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-10-26 11:03:19 +0300 |
| commit | a20281803747d183202c8e7f2c653fd223c1c6da (patch) | |
| tree | 8242923746b336c9738bed0dbaa15923184ec2ac /src/ejabberd_auth_jwt.erl | |
| parent | Improve jwt_key validator (diff) | |
| parent | Add option for JWT field name containing JID (diff) | |
Merge pull request #3069 from nosnilmot/jwt-custom-jid-field
Add option for JWT field name containing JID
Diffstat (limited to 'src/ejabberd_auth_jwt.erl')
| -rw-r--r-- | src/ejabberd_auth_jwt.erl | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/src/ejabberd_auth_jwt.erl b/src/ejabberd_auth_jwt.erl index 71fbabb45..8fce8e39c 100644 --- a/src/ejabberd_auth_jwt.erl +++ b/src/ejabberd_auth_jwt.erl @@ -86,6 +86,7 @@ use_cache(_) -> %%%---------------------------------------------------------------------- check_jwt_token(User, Server, Token) -> JWK = ejabberd_option:jwt_key(Server), + JidField = ejabberd_option:jwt_jid_field(Server), try jose_jwt:verify(JWK, Token) of {true, {jose_jwt, Fields}, Signature} -> ?DEBUG("jwt verify: ~p - ~p~n", [Fields, Signature]), @@ -97,7 +98,7 @@ check_jwt_token(User, Server, Token) -> Now = erlang:system_time(second), if Exp > Now -> - case maps:find(<<"jid">>, Fields) of + case maps:find(JidField, Fields) of error -> false; {ok, SJID} -> @@ -121,6 +122,3 @@ check_jwt_token(User, Server, Token) -> false end. -%% TODO: auth0 username is defined in 'jid' field, but we should -%% allow customizing the name of the field containing the username -%% to adapt to custom claims. |