in src/main/java/com/googlesource/gerrit/plugins/gitblit/auth/GerritToGitBlitUserService.java [83:102]
public UserModel authenticateSSO(String username, String sessionToken) {
WebSession session = webSession.get();
if (session.getSessionId() == null || !session.getSessionId().equals(sessionToken)) {
log.warn("Invalid Gerrit session token for user '" + username + "'");
return null;
}
if (!session.isSignedIn()) {
log.warn("Gerrit session " + session.getSessionId() + " is not signed-in");
return null;
}
if (!session.getUser().getUserName().equals(username)) {
log.warn("Gerrit session " + session.getSessionId() + " is not assigned to user " + username);
return null;
}
return new GerritToGitBlitUserModel(username, userProvider, permissionBackend);
}