libre.sh/keycloak-scim
2
0
Fork 0
Code Issues 14 Pull requests Releases Packages Activity Actions 6

Update RequestAuthenticator.java

Browse source
This commit is contained in:
wildloop 2017-03-15 09:13:41 +01:00 committed by GitHub
parent d723c608d6
commit 366dee6575
1 changed files with 6 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
adapters/oidc/adapter-core/src/main/java/org/keycloak/adapters/RequestAuthenticator.java
View file

@ -160,22 +160,13 @@ public abstract class RequestAuthenticator {
}
protected boolean verifySSL() {
boolean verificationFail = !facade.getRequest().isSecure()
&& deployment.getSslRequired().isRequired(facade.getRequest().getRemoteAddr());
if (verificationFail){
final String remoteAddr = facade.getRequest().getRemoteAddr();
final SslRequired sslRequired = deployment.getSslRequired();
log.warnf("SSL is required to authenticate. "+
"Passed: %s, request is secure: %s, " +
"SSL is required for: %s, " +
"SSL is required for remote addr %s: %s",
!verificationFail,
facade.getRequest().isSecure(),
sslRequired.name(),
remoteAddr,
sslRequired.isRequired(remoteAddr));
if (!facade.getRequest().isSecure()
&& deployment.getSslRequired().isRequired(facade.getRequest().getRemoteAddr())) {
log.warnf("SSL is required to authenticate. Remote address %s is secure: %s, SSL required for: %s .",
facade.getRequest().getRemoteAddr(), facade.getRequest().isSecure(), deployment.getSslRequired().name());
return true;
}
return verificationFail;
return false;
}
protected boolean isAutodetectedBearerOnly(HttpFacade.Request request) {