Merge pull request #135 from uio-bmi/bug-fix/error-in-reading-visas

remove unnecessary dependencies, fix the bug that got the header of t…

pom.xml

@@ -74,21 +74,6 @@
             <artifactId>clearinghouse</artifactId>
             <version>1.2.1</version>
         </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-api</artifactId>
-            <version>0.12.3</version>
-        </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-impl</artifactId>
-            <version>0.12.3</version>
-        </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-jackson</artifactId>
-            <version>0.12.3</version>
-        </dependency>
         <dependency>
             <groupId>no.uio.ifi</groupId>
             <artifactId>tsd-file-api-client</artifactId>

src/main/java/no/elixir/fega/ltp/aspects/AAIAspect.java

@@ -78,10 +78,10 @@ public Object authenticateElixirAAI(ProceedingJoinPoint joinPoint) throws Throwa
         String jwtToken = optionalBearerAuth.get().replace("Bearer ", "");
         try {
             var tokenArray = jwtToken.split("[.]");
-            byte[] decodedHeader = Base64.getUrlDecoder().decode(tokenArray[0]);
-            String decodedHeaderString = new String(decodedHeader);
+            byte[] decodedPayload = Base64.getUrlDecoder().decode(tokenArray[1]);
+            String decodedPayloadString = new String(decodedPayload);
             Gson gson = new Gson();
-            JsonObject claims = gson.fromJson(decodedHeaderString, JsonObject.class);
+            JsonObject claims = gson.fromJson(decodedPayloadString, JsonObject.class);
             List<Visa> controlledAccessGrantsVisas = getVisas(jwtToken, claims.keySet());
             log.info("Elixir user {} authenticated and provided following valid GA4GH Visas: {}", claims.get(Claims.SUBJECT).getAsString(), controlledAccessGrantsVisas);
             request.setAttribute(ELIXIR_ID, claims.get(Claims.SUBJECT).getAsString());