Package org.jenkinsci.plugins

Class BearerTokenFilter

java.lang.Object

org.jenkinsci.plugins.BearerTokenFilter

All Implemented Interfaces:

jakarta.servlet.Filter

public class BearerTokenFilter
extends Object
implements jakarta.servlet.Filter

Authenticates REST / API requests that present a Keycloak access token as Authorization: Bearer <token>.

The token is verified against the realm using the same adapter deployment the browser flow uses: signature (via the realm JWKS), issuer, expiry and — when verify-token-audience is enabled in the adapter config — audience. On success the request runs as the token's user for that request only; no HTTP session is created. Any verification failure is logged and the request continues unauthenticated (anonymous), letting Jenkins' normal authorization decide the outcome.

The filter is inserted into the security filter chain (see KeycloakSecurityRealm.createFilter(FilterConfig)) after session integration and the anonymous filter, so the authentication it sets is visible to Jenkins' permission checks.

Constructor Summary

Constructors

Constructor	Description
BearerTokenFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(jakarta.servlet.ServletRequest request, jakarta.servlet.ServletResponse response, jakarta.servlet.FilterChain chain)
void	init(jakarta.servlet.FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

BearerTokenFilter

public BearerTokenFilter()

Method Details

init

public void init(jakarta.servlet.FilterConfig filterConfig)

Specified by:

init in interface jakarta.servlet.Filter

destroy

public void destroy()

Specified by:

destroy in interface jakarta.servlet.Filter

doFilter

public void doFilter(jakarta.servlet.ServletRequest request,
 jakarta.servlet.ServletResponse response,
 jakarta.servlet.FilterChain chain)
              throws IOException,
jakarta.servlet.ServletException

Specified by:

doFilter in interface jakarta.servlet.Filter

Throws:

IOException

jakarta.servlet.ServletException