mirror of
				https://github.com/spring-projects/spring-security.git
				synced 2025-10-30 22:28:46 +00:00 
			
		
		
		
	Update JwtAuthenticationConverter Docs
Replaced usage of deprecated API Fixes gh-7062
This commit is contained in:
		
							parent
							
								
									9639962e27
								
							
						
					
					
						commit
						08f68c9122
					
				| @ -706,17 +706,24 @@ public class DirectlyConfiguredJwkSetUri extends WebSecurityConfigurerAdapter { | ||||
| } | ||||
| 
 | ||||
| Converter<Jwt, AbstractAuthenticationToken> grantedAuthoritiesExtractor() { | ||||
|     return new GrantedAuthoritiesExtractor(); | ||||
|     JwtAuthenticationConverter jwtAuthenticationConverter = | ||||
|             new JwtAuthenticationConverter(); | ||||
|     jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter | ||||
|             (new GrantedAuthoritiesExtractor()); | ||||
|     return jwtAuthenticationConveter; | ||||
| } | ||||
| ``` | ||||
| 
 | ||||
| which is responsible for converting a `Jwt` into an `Authentication`. | ||||
| As part of its configuration, we can supply a subsidiary converter to go from `Jwt` to a `Collection` of `GrantedAuthority`s. | ||||
| 
 | ||||
| We can override this quite simply to alter the way granted authorities are derived: | ||||
| That final converter might be something like `GrantedAuthoritiesExtractor` below: | ||||
| 
 | ||||
| ```java | ||||
| static class GrantedAuthoritiesExtractor extends JwtAuthenticationConverter { | ||||
|     protected Collection<GrantedAuthority> extractAuthorities(Jwt jwt) { | ||||
| static class GrantedAuthoritiesExtractor | ||||
|         implements Converter<Jwt, Collection<GrantedAuthority>> { | ||||
| 
 | ||||
|     public Collection<GrantedAuthority> convert(Jwt jwt) { | ||||
|         Collection<String> authorities = (Collection<String>) | ||||
|                 jwt.getClaims().get("mycustomclaim"); | ||||
| 
 | ||||
|  | ||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user