VERIFY JWT(nimbus)

JWT 검증 메소드

*JWE

*자세한 설명 생략

 

 

/**
 * JWT VERIFY
 * 
 * @param HttpServletRequest
 * @param resVO
 * @return CmmResVO
 */
public CmmResVO JWTVerify(HttpServletRequest req, CmmResVO resVO) {

    try {

        final String jwt = req.getHeader("Authorization");

        if(CmmUtile.nullCheck(jwt)) { return resVO.ERR_9005(); }

        /** JWE RSA KEYPAIR */
        final KeyFactory keyFactory = KeyFactory.getInstance("RSA");

        /* Decryption Key */
        final PKCS8EncodedKeySpec pKCS8EncodedKeySpec = new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKey));
        final RSAPrivateKey rsaPrivateKey = (RSAPrivateKey) keyFactory.generatePrivate(pKCS8EncodedKeySpec);
        final RSADecrypter rsaDecrypter = new RSADecrypter(rsaPrivateKey);

        /** Parse */
        final EncryptedJWT decryptedJWE = EncryptedJWT.parse(jwt);

        /* Decryption */
        decryptedJWE.decrypt(rsaDecrypter);

        JWTClaimsSet claimsSet = decryptedJWE.getJWTClaimsSet();

        /** 토큰 만기 체크 */
        // -1 : 현재날짜 이전, 1 : 현재날짜 이후, 0 : 현재날짜와 같음 
        Integer expireCheck = claimsSet.getExpirationTime().compareTo(new Date());
        if("-1".equals(expireCheck.toString())){ return resVO.ERR_9006(); }

    } catch (Exception e) {
        resVO.ERR_9005();
        log.error("JWTVerify ERR Message :", e);
    }

    return resVO;
}

 

 

▷ 관련 글

JWE Example(nimbus)

Create RSA Keypair(.pem)