angular - JWT Token was removed from header when page refreshed -


i'm using jwt token based authentication,its working fine until page refreshed. if press f5 page reloading token missing

host "localhost:9090" user-agent "mozilla/5.0 (windows nt 10.0;… gecko/20100101 firefox/54.0" accept "application/json, text/plain, */*" accept-language "en-us,en;q=0.5" accept-encoding "gzip, deflate" **authorization "bearer eyjhbgcioijiuzi1niisin…sd-zdipmzibmk4gq_ddmguwbizsi"** referer "http://localhost:9090/fg.html" connection "keep-alive"

after refresh of page 

host "localhost:9090"     user-agent "mozilla/5.0 (windows nt 10.0;… gecko/20100101 firefox/54.0"     accept "application/json, text/plain, */*"     accept-language "en-us,en;q=0.5"     accept-encoding "gzip, deflate"     **authorization "null"**     referer "http://localhost:9090/fg.html"     connection "keep-alive"

which creating authentication problem token missing header

in login check controller 

responsemap.put("loginname",adminuser1.getadminid()); responsemap.put("isuserexist",boolean.tostring(true)); responsemap.put("role",adminuser1.getpermissiongroup()); responsemap.put("session",session); responsemap.put("balance",adminuser1.getbalance().tostring()); responsemap.put("phase",phase.getprefix()); responsemap.put("token",gettoken(adminuser1.getadminid())); return objectmapper.writevalueasstring(responsemap);   public string gettoken(string loginname){          string jwttoken = "";         final string uuid = uuid.randomuuid().tostring().replaceall("-", "");         map<string, object> headerclaims = new hashmap<>();         headerclaims.put("typ", "jwt");          jwttoken = jwts.builder()                 .setsubject(loginname)                 .setissuedat(new date())                 .setaudience(uuid)                 .setheader(headerclaims)                 .setexpiration(new date(system.currenttimemillis() + 120000l))                 .signwith(signaturealgorithm.hs256, constants.key)                 .compact();          return jwttoken;     }

jwtfilter 

public class jwtfilter extends genericfilterbean {      public void dofilter(final servletrequest req, final servletresponse res, final filterchain chain)             throws ioexception, servletexception {          final httpservletrequest request = (httpservletrequest) req;         final httpservletresponse response = (httpservletresponse) res;         final string authheader = request.getheader("authorization");           if ("options".equals(request.getmethod())) {             response.setstatus(httpservletresponse.sc_ok);              chain.dofilter(req, res);         } else {              if (authheader == null || !authheader.startswith("bearer ")) {                 throw new servletexception("missing or invalid authorization header");             }              final string token = authheader.substring(7);              final claims claims;             try {                 claims = parseclaims(constants.key,token);                 request.setattribute("claims", claims);             } catch (badcredentialsexception e) {                 e.printstacktrace();             } catch (jwtexpiredtokenexception e) {                 e.printstacktrace();             }          }           chain.dofilter(req, res);     }      public claims parseclaims(string signingkey, string token) throws badcredentialsexception, jwtexpiredtokenexception {         try {             return jwts.parser().setsigningkey(signingkey).parseclaimsjws(token).getbody();         } catch (unsupportedjwtexception | malformedjwtexception | illegalargumentexception | io.jsonwebtoken.signatureexception ex) {             throw new badcredentialsexception("invalid jwt token: ");         } catch (expiredjwtexception expiredex) {             throw new jwtexpiredtokenexception("jwt token expired");         }     }

how on come problem, storing token in localstorage might create more security problem..?


Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more