jodd-joy/src/main/java/jodd/joy/auth/AuthInterceptor.java
protected T authenticateUserViaToken(final ActionRequest actionRequest) {
		final HttpServletRequest servletRequest = actionRequest.getHttpServletRequest();

		// then try the auth token
		final String token = ServletUtil.resolveAuthBearerToken(servletRequest);
		if (token == null) {
			return null;
		}

		final T authToken = userAuth().validateToken(token);
		if (authToken == null) {
			return null;
		}

		// granted
		final T newAuthToken = userAuth().rotateToken(authToken);

		actionRequest.getHttpServletResponse().setHeader("Authentication", "Bearer: " + userAuth().tokenValue(newAuthToken));

		return newAuthToken;
	}
protected T authenticateUserViaToken(final ActionRequest actionRequest) {
		final HttpServletRequest servletRequest = actionRequest.getHttpServletRequest();

		// then try the auth token
		final String token = ServletUtil.resolveAuthBearerToken(servletRequest);
		if (token == null) {
			return null;
		}

		final T authToken = userAuth().validateToken(token);
		if (authToken == null) {
			return null;
		}

		// granted
		final T newAuthToken = userAuth().rotateToken(authToken);

		actionRequest.getHttpServletResponse().setHeader("Authentication", "Bearer: " + userAuth().tokenValue(newAuthToken));

		return newAuthToken;
	}
protected T authenticateUserViaToken ( final ActionRequest actionRequest ) { final HttpServletRequest servletRequest = actionRequest . getHttpServletRequest ( ) ; // then try the auth token final String token = ServletUtil . resolveAuthBearerToken ( servletRequest ) ; if ( token == null ) { return null ; } final T authToken = userAuth ( ) . validateToken ( token ) ; if ( authToken == null ) { return null ; } // granted final T newAuthToken = userAuth ( ) . rotateToken ( authToken ) ; actionRequest . getHttpServletResponse ( ) . setHeader ( "Authentication" , "Bearer: " + userAuth ( ) . tokenValue ( newAuthToken ) ) ; return newAuthToken ; }
Tries to authenticate user via token. Returns the token if user is authenticated.
Returned token may be rotated.
Tries to authenticate user via token . Returns the token if user is authenticated . Returned token may be rotated .