From a7f3111bd8f40555ddb56a1f855905b3abb02813 Mon Sep 17 00:00:00 2001 From: Mark McCormick Date: Thu, 11 Aug 2022 01:21:48 +0100 Subject: [PATCH] Update how the plugin parses groups in the http header --- .../reverse_proxy_auth/ReverseProxySecurityRealm.java | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/main/java/org/jenkinsci/plugins/reverse_proxy_auth/ReverseProxySecurityRealm.java b/src/main/java/org/jenkinsci/plugins/reverse_proxy_auth/ReverseProxySecurityRealm.java index 32d3010..b49c2db 100644 --- a/src/main/java/org/jenkinsci/plugins/reverse_proxy_auth/ReverseProxySecurityRealm.java +++ b/src/main/java/org/jenkinsci/plugins/reverse_proxy_auth/ReverseProxySecurityRealm.java @@ -44,6 +44,7 @@ import java.util.ArrayList; import java.util.Arrays; import java.util.Collections; +import java.util.Enumeration; import java.util.HashSet; import java.util.Hashtable; import java.util.List; @@ -519,16 +520,15 @@ public void doFilter(ServletRequest request, } } else { - String groups = r.getHeader(headerGroups); + Enumeration groups = r.getHeaders(headerGroups); List localAuthorities = new ArrayList(); localAuthorities.add(AUTHENTICATED_AUTHORITY); if (groups != null) { - StringTokenizer tokenizer = new StringTokenizer(groups, headerGroupsDelimiter); - while (tokenizer.hasMoreTokens()) { - final String token = tokenizer.nextToken().trim(); - localAuthorities.add(new GrantedAuthorityImpl(token)); + while (groups.hasMoreElements()) { + String group = groups.nextElement(); + localAuthorities.add(new GrantedAuthorityImpl(group)); } }