Skip to content

NFC-171 Validate signing cert chain, formats and configured origin#121

Open
SanderKondratjevNortal wants to merge 1 commit into
web-eid-mobilefrom
NFC-171
Open

NFC-171 Validate signing cert chain, formats and configured origin#121
SanderKondratjevNortal wants to merge 1 commit into
web-eid-mobilefrom
NFC-171

Conversation

@SanderKondratjevNortal

Copy link
Copy Markdown

Signed-off-by: Sander Kondratjev sander.kondratjev@nortal.com

Signed-off-by: Sander Kondratjev <sander.kondratjev@nortal.com>
@SanderKondratjevNortal SanderKondratjevNortal changed the base branch from main to web-eid-mobile June 15, 2026 12:29
@sonarqubecloud

Copy link
Copy Markdown


var challenge = nonceGenerator.generateAndStoreNonce();

String loginUri = ServletUriComponentsBuilder.fromCurrentContextPath()

@mrts mrts Jun 16, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Without .fromCurrentContextPath() deploying the example under a non-root context path will no longer work. If this is intended, it should be documented in README.


@Override
public boolean supports(String format) {
return format != null && format.startsWith(getSupportedFormatPrefix());

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As documented in README.md, minor versions must be backward-compatible within the major version, this will reject future compatible web-eid:1.x tokens.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants