Enabled login with JWT with SSO parameter is false

Author: masseb974

knowage-core/src/main/java/it/eng/spagobi/commons/filters/ProfileFilter.java

@@ -49,6 +49,7 @@
 import it.eng.spagobi.commons.services.LoginModule;
 import it.eng.spagobi.commons.utilities.ChannelUtilities;
 import it.eng.spagobi.commons.utilities.GeneralUtilities;
+import it.eng.spagobi.services.common.GenericJWTSsoService;
 import it.eng.spagobi.services.common.SsoServiceFactory;
 import it.eng.spagobi.services.common.SsoServiceInterface;
 import it.eng.spagobi.services.security.bo.SpagoBIUserProfile;
@@ -120,11 +121,17 @@ public void doFilter(ServletRequest request, ServletResponse response, FilterCha
 					if (ChannelUtilities.isWebRunning() && !GeneralUtilities.isSSOEnabled()) {
 						// case of installation as web application without SSO
 						try {
-							userId = getUserIdInWebModeWithoutSSO(httpRequest);
+							String jwtLabel = System.getProperty("JWT_LABEL", System.getenv("JWT_LABEL"));
+							if (jwtLabel != null && request.getParameter(jwtLabel) != null) {
+								GenericJWTSsoService genericJWTSsoService = new GenericJWTSsoService();
+								userId = genericJWTSsoService.readUserIdentifier(httpRequest);
+							} else {
+								userId = getUserIdInWebModeWithoutSSO(httpRequest);
+							}
 						} catch (Exception e) {
 							LOGGER.error("Error authenticating user", e);
-							httpRequest.getRequestDispatcher("/WEB-INF/jsp/commons/silentLoginFailed.jsp")
-									.forward(request, response);
+							// httpRequest.getRequestDispatcher("/WEB-INF/jsp/commons/silentLoginFailed.jsp").forward(request, response);
+							httpResponse.sendError(HttpServletResponse.SC_UNAUTHORIZED);
 							return;
 						}
 					} else {

knowageutils/src/main/java/it/eng/spagobi/services/common/GenericJWTSsoService.java

@@ -84,7 +84,7 @@ private DecodedJWT verifyToken(String token) {
 
 	private DecodedJWT verifyTokenBySignature(String token, String signature) throws Exception {
 		Algorithm algorithmInputTocken = Algorithm.HMAC256(signature);
-		JWTVerifier verifier = JWT.require(algorithmInputTocken).build();
+		JWTVerifier verifier = JWT.require(algorithmInputTocken).withIssuer(System.getProperty("JWT_ISSUER", System.getenv("JWT_ISSUER"))).build();
 		return verifier.verify(token);
 	}