Fix the getClassLoader runtime exception

Signed-off-by: Ryan Liang <jiallian@amazon.com>
RyanL1997 · Jul 24, 2023 · e584b15 · e584b15
1 parent 78f31d5
commit e584b15
Showing 1 changed file with 18 additions and 5 deletions.
diff --git a/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java b/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java
@@ -58,12 +58,25 @@ public OnBehalfOfAuthenticator(Settings settings) {
     }
 
     private JwtParser initParser(final String signingKey) {
-        JwtParser _jwtParser = keyUtil.keyAlgorithmCheck(signingKey, log);
-        if (_jwtParser != null) {
-            return _jwtParser;
-        } else {
-            throw new RuntimeException("Unable to find on behalf of authenticator signing key");
+        final SecurityManager sm = System.getSecurityManager();
+
+        if (sm != null) {
+            sm.checkPermission(new SpecialPermission());
         }
+
+        JwtParser _jwtParser = AccessController.doPrivileged(new PrivilegedAction<JwtParser>() {
+            @Override
+            public JwtParser run() {
+                JwtParser parser = keyUtil.keyAlgorithmCheck(signingKey, log);
+                if (parser != null) {
+                    return parser;
+                } else {
+                    throw new RuntimeException("Unable to find on behalf of authenticator signing key");
+                }
+            }
+        });
+
+        return _jwtParser;
     }
 
     private List<String> extractSecurityRolesFromClaims(Claims claims) {