fix: decode JWT for EntraID (#4625)

camunda · Mar 5, 2024 · 176d562 · 176d562
1 parent dfccae9
commit 176d562
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/...pp/src/main/java/io/camunda/tasklist/webapp/security/identity/IdentityAuthentication.java b/...pp/src/main/java/io/camunda/tasklist/webapp/security/identity/IdentityAuthentication.java
@@ -188,8 +188,15 @@ public void authenticate(final Tokens tokens) {
     expires = accessToken.getToken().getExpiresAt();
     groups = accessToken.getUserDetails().getGroups();
     if (!isPolling()) {
-      refreshTokenExpiresAt =
-          getIdentity().authentication().decodeJWT(this.tokens.getRefreshToken()).getExpiresAt();
+      try {
+        refreshTokenExpiresAt =
+            getIdentity().authentication().decodeJWT(this.tokens.getRefreshToken()).getExpiresAt();
+      } catch (TokenDecodeException e) {
+        LOGGER.error(
+            "Unable to decode refresh token {} with exception: {}",
+            this.tokens.getRefreshToken(),
+            e.getMessage());
+      }
     }
     if (!hasExpired()) {
       setAuthenticated(true);