Fix JWT Vulnerabilities (Weak Signing, None Algo) in Dropwizard

Dropwizard applications frequently inherit JWT vulnerabilities through improper use of the jose4j library or custom authentication filters. The most critical failures involve accepting the 'none' algorithm (allowing unauthenticated access) or using weak, hardcoded HMAC secrets that are susceptible to offline brute-forcing. To harden your auth stack, you must enforce strict algorithm validation and high-entropy key management.

The Vulnerable Pattern

JwtConsumer jwtConsumer = new JwtConsumerBuilder()
    .setVerificationKey(new HmacKey("password123".getBytes())) // VULNERABILITY: Weak, hardcoded secret
    .setRelaxVerificationKeyValidation() // VULNERABILITY: Allows insecure keys
    .setSkipSignatureVerification() // VULNERABILITY: Fatal flaw, accepts any token
    .setRequireExpirationTime()
    .build();

The Secure Implementation

The secure implementation mitigates the 'none' algorithm exploit and algorithm-switching attacks by utilizing 'setExpectedAlgorithms' and 'setJwsAlgorithmConstraints'. This forces the library to reject any token that does not use the specified HMAC-SHA256 signature. Additionally, sourcing the secret from an environment variable and removing 'setRelaxVerificationKeyValidation' ensures that the key meets the minimum cryptographic strength requirements (e.g., at least 256 bits for HS256), preventing signature forgery via brute-force.

JwtConsumer jwtConsumer = new JwtConsumerBuilder()
    .setRequireExpirationTime()
    .setAllowedClockSkewInSeconds(30)
    .setRequireSubject()
    // FIX: Source high-entropy key from environment and enforce length
    .setVerificationKey(new HmacKey(System.getenv("JWT_SECRET_KEY").getBytes()))
    // FIX: Explicitly whitelist expected algorithms to block 'none' and 'alg-switching'
    .setExpectedAlgorithms(AlgorithmIdentifiers.HMAC_SHA256)
    .setJwsAlgorithmConstraints(new AlgorithmConstraints(
        ConstraintType.WHITELIST, 
        AlgorithmIdentifiers.HMAC_SHA256
    ))
    .build();