|
|
@@ -148,7 +148,13 @@ public class AuthenticationController {
|
|
|
|
|
|
String token = authHeader.substring(7);
|
|
|
try {
|
|
|
- String username = tokenService.validateToken(token);
|
|
|
+ // First validate the token
|
|
|
+ if (!tokenService.validateToken(token)) {
|
|
|
+ return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();
|
|
|
+ }
|
|
|
+
|
|
|
+ // If token is valid, get the username from the token
|
|
|
+ String username = tokenService.getSubject(token);
|
|
|
Optional<AppUser> userOpt = appUserRepository.findByUserEmail(username);
|
|
|
|
|
|
if (userOpt.isEmpty()) {
|
|
|
@@ -156,7 +162,7 @@ public class AuthenticationController {
|
|
|
}
|
|
|
|
|
|
AppUser user = userOpt.get();
|
|
|
- return ResponseEntity.ok(new TokenDTO(token, user.getCompanyId()));
|
|
|
+ return ResponseEntity.ok(new TokenDTO(token, user.getCompanyId(), user.getUserId()));
|
|
|
|
|
|
} catch (Exception e) {
|
|
|
return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();
|