Remove fallback mechanism for the signed cookies from super tenant

wso2-extensions · Dec 10, 2024 · 283a8dc · 283a8dc
1 parent cb7e045
commit 283a8dc
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 8 deletions.
diff --git a/...ain/java/org/wso2/carbon/identity/conditional/auth/functions/http/CookieFunctionImpl.java b/...ain/java/org/wso2/carbon/identity/conditional/auth/functions/http/CookieFunctionImpl.java
@@ -187,10 +187,6 @@ public String getCookieValue(JsServletRequest request, Object... params) {
                                     .getTenantDomain();
                             boolean isValid = IdentityUtil.validateSignatureFromTenant(valueString, signature,
                                     tenantDomain);
-                            // Fallback mechanism for already signed cookies.
-                            if (!isValid) {
-                                isValid = SignatureUtil.validateSignature(valueString, signature);
-                            }
                             if (!isValid) {
                                 log.error("Cookie signature didn't matched with the cookie value.");
                                 return null;

diff --git a/.../java/org/wso2/carbon/identity/conditional/auth/functions/http/GetCookieFunctionImpl.java b/.../java/org/wso2/carbon/identity/conditional/auth/functions/http/GetCookieFunctionImpl.java
@@ -104,10 +104,6 @@ public String getCookieValue(JsServletRequest request, Object... params) {
                             String tenantDomain = PrivilegedCarbonContext.getThreadLocalCarbonContext()
                                     .getTenantDomain();
                             boolean isValid = IdentityUtil.validateSignatureFromTenant(valueString, signature, tenantDomain);
-                            // Fallback mechanism for already signed cookies.
-                            if (!isValid) {
-                                isValid = SignatureUtil.validateSignature(valueString, signature);
-                            }
                             if (!isValid) {
                                 log.error("Cookie signature didn't matched with the cookie value.");
                                 return null;