Refactor the backendrole extraction in oboauthenticator

RyanL1997 · RyanL1997 · commit e52c5ce103bf · 2023-08-22T09:26:50.000-07:00
Signed-off-by: Ryan Liang &lt;jiallian@amazon.com&gt;
diff --git a/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java b/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java
@@ -92,27 +92,24 @@ private List<String> extractSecurityRolesFromClaims(Claims claims) {
             log.warn("This is a malformed On-behalf-of Token");
         }
 
-        return Arrays.stream(rolesClaim.split(",")).map(String::trim).filter(s -> !s.isEmpty()).collect(Collectors.toUnmodifiableList());
+        List<String> roles = Arrays.stream(rolesClaim.split(","))
+            .map(String::trim)
+            .filter(s -> !s.isEmpty())
+            .collect(Collectors.toUnmodifiableList());
+
+        return roles;
     }
 
     private String[] extractBackendRolesFromClaims(Claims claims) {
-        // Object backendRolesObject = ObjectUtils.firstNonNull(claims.get("ebr"), claims.get("dbr"));
-        if (!claims.containsKey("br")) {
-            return null;
-        }
-
         Object backendRolesObject = claims.get("br");
         String[] backendRoles;
 
         if (backendRolesObject == null) {
             log.warn("This is a malformed On-behalf-of Token");
             backendRoles = new String[0];
         } else {
-            final String backendRolesClaim = backendRolesObject.toString();
-
             // Extracting roles based on the compatibility mode
-            String decryptedBackendRoles = backendRolesClaim;
-            backendRoles = Arrays.stream(decryptedBackendRoles.split(",")).map(String::trim).toArray(String[]::new);
+            backendRoles = Arrays.stream(backendRolesObject.toString().split(",")).map(String::trim).toArray(String[]::new);
         }
 
         return backendRoles;
