Rettar sikkerheitsissue (#168)

navikt · Jan 4, 2024 · 02c3df1 · 02c3df1
1 parent 7ce2384
commit 02c3df1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/apps/etterlatte-proxy/src/main/kotlin/auth/Authentication.kt b/apps/etterlatte-proxy/src/main/kotlin/auth/Authentication.kt
@@ -7,11 +7,11 @@ import io.ktor.server.auth.Authentication
 import io.ktor.server.auth.jwt.JWTPrincipal
 import io.ktor.server.auth.jwt.jwt
 import no.nav.etterlatte.config.Config
-import java.net.URL
+import java.net.URI
 import java.util.concurrent.TimeUnit
 
 fun Application.installAuthentication(configAad: Config.AAD) {
-    val jwkProviderAad = JwkProviderBuilder(URL(configAad.metadata.jwksUri))
+    val jwkProviderAad = JwkProviderBuilder(URI(configAad.metadata.jwksUri).toURL())
         // cache up to 10 JWKs for 24 hours
         .cached(10, 24, TimeUnit.HOURS)
         // if not cached, only allow max 10 different keys per minute to be fetched from external provider