commit 5b35bcd21392dc71d3a847ba3a20e9fcd38534f6
author SANDHYA.JS <sandhya.j@tataelxsi.co.in> Thu Apr 27 15:11:06 2023 +0530
committer garciadeblas <gerardo.garciadeblas@telefonica.com> Thu Jun 08 17:31:59 2023 +0200
tree e830d460a8b08ea98c9bf26ba5e5b738d03eef81
parent 1b17c432991a95035a1732426f0c11db57e511c9

Coverity-CWE 922: Insecure Storage of Sensitive Information(localStorage write)

	- Coverity fix for localStorage write issue: For storing datas
	  in browser localStorage so changed it to sessionStorage

Change-Id: I3fdce439b923e006b44a50a42fab19b7ffbcdec6
Signed-off-by: SANDHYA.JS <sandhya.j@tataelxsi.co.in>

src/services/AuthInterceptorService.ts

diff --git a/src/services/AuthInterceptorService.ts b/src/services/AuthInterceptorService.ts
index d2166e3..5f4255e 100644
--- a/src/services/AuthInterceptorService.ts
+++ b/src/services/AuthInterceptorService.ts
@@ -68,7 +68,7 @@
     public intercept(req: HttpRequest<{}>, next: HttpHandler): Observable<HttpSentEvent |
         // eslint-disable-next-line @typescript-eslint/no-explicit-any
         HttpHeaderResponse | HttpProgressEvent | HttpResponse<{}> | HttpUserEvent<any> | any> {
-        const idToken: string = localStorage.getItem('id_token');
+        const idToken: string = sessionStorage.getItem('id_token');
         const excludedUrl: string[] = ['osm/admin/v1/tokens', 'assets/i18n/', 'osm/version'];
         if (excludedUrl.some((x: string): boolean => req.url.includes(x))) { return next.handle(req); }
         if (idToken.length > 0) {