artin/OBP-API
1
0
Fork 0
mirror of https://github.com/OpenBankProject/OBP-API.git synced 2026-02-06 17:37:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

feature/Make the function getHeaderValue cryptographically secure

Browse Source
This commit is contained in:
Marko Milić 2025-04-01 09:25:27 +02:00
parent e7061ed075
commit b46af4084d
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
obp-api/src/main/scala/code/api/util/BerlinGroupSigning.scala
View File

@ -156,7 +156,8 @@ object BerlinGroupSigning extends MdcLoggable {
}
def getHeaderValue(name: String, requestHeaders: List[HTTPParam]): String = {
requestHeaders.find(_.name.toLowerCase() == name.toLowerCase()).map(_.values.mkString).getOrElse("None")
requestHeaders.find(_.name.toLowerCase() == name.toLowerCase()).map(_.values.mkString)
.getOrElse(SecureRandomUtil.csprng.nextLong().toString)
}
private def getPem(requestHeaders: List[HTTPParam]): String = {
val certificate = getHeaderValue(RequestHeader.`TPP-Signature-Certificate`, requestHeaders)