Skip to content

Restrict supported Web eID token formats#125

Open
aarmam wants to merge 1 commit into
web-eid-mobilefrom
NFC-176
Open

Restrict supported Web eID token formats#125
aarmam wants to merge 1 commit into
web-eid-mobilefrom
NFC-176

Conversation

@aarmam

@aarmam aarmam commented Jul 3, 2026

Copy link
Copy Markdown

Signed-off-by: Mart Aarma mart.aarma@nortal.com

Signed-off-by: Sander Kondratjev sander.kondratjev@nortal.com
Signed-off-by: Sander Kondratjev <sander.kondratjev@nortal.com>
@aarmam aarmam requested a review from mrts July 3, 2026 12:14
@sonarqubecloud

sonarqubecloud Bot commented Jul 3, 2026

Copy link
Copy Markdown

protected Pattern getSupportedFormatPattern() {
return V1_SUPPORTED_TOKEN_FORMAT_PATTERN;
return V1_SUPPORTED_TOKEN_FORMAT_PREFIX.equals(format)
|| "web-eid:1.0".equals(format);

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will reject future backwards-compatible web-eid:1.x tokens. As written in the docs, minor format changes must be backwards-compatible within the same major version.

);

@ParameterizedTest
@ValueSource(strings = {"web-eid:1", "web-eid:1.0", "web-eid:1.1", "web-eid:1.10", "web-eid:1.999"})

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We actually want "web-eid:1.2", "web-eid:1.10", "web-eid:1.999" etc pass here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants