Skip to content

Commit c0b00c2

Browse files
committed
F!!Oppgraderer til siste version av nav token support som inneholder fix for spring sårbarhet ref CWE-178
1 parent 505ec12 commit c0b00c2

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

build.gradle

+1-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ buildscript {
55
springKafkaVersion = '3.2.4'
66
cxfVersion = '3.4.2'
77
jacksonModuleKotlinVersion = '2.18.1'
8-
tokenSupportVersion = '4.1.4'
8+
tokenSupportVersion = '5.0.11'
99
}
1010
}
1111

src/main/kotlin/no/nav/eessi/pensjon/config/PDLConfiguration.kt

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ class PDLConfiguration(
2222
override fun callBack(): PdlToken {
2323
val clientProperties = Optional.ofNullable(clientConfigurationProperties.registration["pdl-credentials"]).orElseThrow { RuntimeException("could not find oauth2 client config for pdl-credentials") }
2424
val response = oAuth2AccessTokenService.getAccessToken(clientProperties)
25-
val token = response.accessToken!!
25+
val token = response.access_token!!
2626
return PdlTokenImp(token)
2727
}
2828

src/main/kotlin/no/nav/eessi/pensjon/config/RestTemplateConfig.kt

+1-1
Original file line numberDiff line numberDiff line change
@@ -135,7 +135,7 @@ class RestTemplateConfig(
135135
): ClientHttpRequestInterceptor {
136136
return ClientHttpRequestInterceptor { request: HttpRequest, body: ByteArray?, execution: ClientHttpRequestExecution ->
137137
val response = oAuth2AccessTokenService.getAccessToken(clientProperties)
138-
request.headers.setBearerAuth(response.accessToken!!)
138+
request.headers.setBearerAuth(response.access_token!!)
139139
/*
140140
val tokenChunks = response.accessToken.split(".")
141141
val tokenBody = tokenChunks[1]

0 commit comments

Comments
 (0)