From 366dee657538eda2fa44ed52e3eb24df84209f51 Mon Sep 17 00:00:00 2001 From: wildloop Date: Wed, 15 Mar 2017 09:13:41 +0100 Subject: [PATCH] Update RequestAuthenticator.java --- .../adapters/RequestAuthenticator.java | 21 ++++++------------- 1 file changed, 6 insertions(+), 15 deletions(-) diff --git a/adapters/oidc/adapter-core/src/main/java/org/keycloak/adapters/RequestAuthenticator.java b/adapters/oidc/adapter-core/src/main/java/org/keycloak/adapters/RequestAuthenticator.java index d8869fdec1..158bc9d03f 100755 --- a/adapters/oidc/adapter-core/src/main/java/org/keycloak/adapters/RequestAuthenticator.java +++ b/adapters/oidc/adapter-core/src/main/java/org/keycloak/adapters/RequestAuthenticator.java @@ -160,22 +160,13 @@ public abstract class RequestAuthenticator { } protected boolean verifySSL() { - boolean verificationFail = !facade.getRequest().isSecure() - && deployment.getSslRequired().isRequired(facade.getRequest().getRemoteAddr()); - if (verificationFail){ - final String remoteAddr = facade.getRequest().getRemoteAddr(); - final SslRequired sslRequired = deployment.getSslRequired(); - log.warnf("SSL is required to authenticate. "+ - "Passed: %s, request is secure: %s, " + - "SSL is required for: %s, " + - "SSL is required for remote addr %s: %s", - !verificationFail, - facade.getRequest().isSecure(), - sslRequired.name(), - remoteAddr, - sslRequired.isRequired(remoteAddr)); + if (!facade.getRequest().isSecure() + && deployment.getSslRequired().isRequired(facade.getRequest().getRemoteAddr())) { + log.warnf("SSL is required to authenticate. Remote address %s is secure: %s, SSL required for: %s .", + facade.getRequest().getRemoteAddr(), facade.getRequest().isSecure(), deployment.getSslRequired().name()); + return true; } - return verificationFail; + return false; } protected boolean isAutodetectedBearerOnly(HttpFacade.Request request) {