Class JwtBearerTokenCrumbExclusion

java.lang.Object

hudson.security.csrf.CrumbExclusion

io.jenkins.plugins.jwt.auth.filter.JwtBearerTokenCrumbExclusion

All Implemented Interfaces:

ExtensionPoint

@Extension(ordinal=100.0)
public class JwtBearerTokenCrumbExclusion
extends CrumbExclusion

A JWT bearer token that exclude requested from Crumb that contains a valid signed JWT token.

Pinned to a higher-than-default ordinal so it runs before other CrumbExclusions that may consume the request themselves (notably the mcp-server Endpoint). Otherwise a competing exclusion could handle a request carrying an invalid/expired Bearer token as anonymous, bypassing the RFC 6750 401 challenge issued by ProtectedResourceChallengeFilter.

Nested Class Summary

Nested classes/interfaces inherited from interface ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor	Description
JwtBearerTokenCrumbExclusion()

Method Summary

Modifier and Type	Method	Description
boolean	process(jakarta.servlet.http.HttpServletRequest httpRequest, jakarta.servlet.http.HttpServletResponse httpResponse, jakarta.servlet.FilterChain chain)

Methods inherited from class CrumbExclusion

all, process

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JwtBearerTokenCrumbExclusion

public JwtBearerTokenCrumbExclusion()

Method Details

process

public boolean process(jakarta.servlet.http.HttpServletRequest httpRequest,
 jakarta.servlet.http.HttpServletResponse httpResponse,
 jakarta.servlet.FilterChain chain)
                throws IOException,
jakarta.servlet.ServletException

Overrides:

process in class CrumbExclusion

Throws:

IOException

jakarta.servlet.ServletException