Fix error with multiple authentication interceptors.

phyloviz · Nov 26, 2023 · 9eae653 · 9eae653
1 parent 81a1f69
commit 9eae653
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.../src/main/java/pt/ist/meic/phylodb/security/authentication/AuthenticationInterceptor.java b/.../src/main/java/pt/ist/meic/phylodb/security/authentication/AuthenticationInterceptor.java
@@ -47,7 +47,7 @@ public AuthenticationInterceptor(UserService userService, String provider) {
 	public boolean handle(HttpServletRequest req, HttpServletResponse res, Object handler) {
 		String auth = req.getHeader(HttpHeaders.AUTHORIZATION);
 		if (!provider.equals(req.getParameter(PROVIDER)))
-			return !isLastHandler() || handleProblem(res, Problem.INVALID_REQUEST);
+			return !isLastHandler() || req.getAttribute(PROVIDER) != null || handleProblem(res, Problem.INVALID_REQUEST);
 		String[] authorization;
 		if (auth == null || !(authorization = auth.split(" "))[0].equals(AUTHENTICATION_SCHEME))
 			return handleProblem(res, Problem.INVALID_REQUEST);