Merge pull request #88 from ELIXIR-NO/bugfix/error-in-reading-visas

read the payload of the token instead of the header
ELIXIR-NO · Feb 16, 2024 · 6339a8f · 6339a8f
2 parents 6c845a3 + 1a75811
commit 6339a8f
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/services/localega-tsd-proxy/src/main/java/no/elixir/fega/ltp/aspects/AAIAspect.java b/services/localega-tsd-proxy/src/main/java/no/elixir/fega/ltp/aspects/AAIAspect.java
@@ -78,10 +78,10 @@ public Object authenticateElixirAAI(ProceedingJoinPoint joinPoint) throws Throwa
     String jwtToken = optionalBearerAuth.get().replace("Bearer ", "");
     try {
       var tokenArray = jwtToken.split("[.]");
-      byte[] decodedHeader = Base64.getUrlDecoder().decode(tokenArray[0]);
-      String decodedHeaderString = new String(decodedHeader);
+      byte[] decodedPayload = Base64.getUrlDecoder().decode(tokenArray[1]);
+      String decodedPayloadString = new String(decodedPayload);
       Gson gson = new Gson();
-      JsonObject claims = gson.fromJson(decodedHeaderString, JsonObject.class);
+      JsonObject claims = gson.fromJson(decodedPayloadString, JsonObject.class);
       List<Visa> controlledAccessGrantsVisas = getVisas(jwtToken, claims.keySet());
       log.info(
           "Elixir user {} authenticated and provided following valid GA4GH Visas: {}",