From 290c4bf4b39c8a08f75c19b51d8d436f0e3a63d6 Mon Sep 17 00:00:00 2001 From: Dario Seidl Date: Sun, 1 Apr 2018 21:42:32 +0200 Subject: [PATCH] Prevent ArrayIndexOutOfBoundsException in JwtTokenFilter.getTokenString --- .../java/io/spring/api/security/JwtTokenFilter.java | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/src/main/java/io/spring/api/security/JwtTokenFilter.java b/src/main/java/io/spring/api/security/JwtTokenFilter.java index 87ad73d..2873650 100644 --- a/src/main/java/io/spring/api/security/JwtTokenFilter.java +++ b/src/main/java/io/spring/api/security/JwtTokenFilter.java @@ -48,10 +48,15 @@ public class JwtTokenFilter extends OncePerRequestFilter { } private Optional getTokenString(String header) { - if (header == null || header.split("").length < 2) { + if (header == null) return Optional.empty(); - } else { - return Optional.ofNullable(header.split(" ")[1]); + else { + String[] split = header.split(" "); + if (split.length < 2) { + return Optional.empty(); + } else { + return Optional.ofNullable(split[1]); + } } } }