summaryrefslogtreecommitdiffstats
path: root/vespa-athenz/src
diff options
context:
space:
mode:
authorBjørn Christian Seime <bjorncs@verizonmedia.com>2020-06-02 13:46:05 +0200
committerGitHub <noreply@github.com>2020-06-02 13:46:05 +0200
commit83f00b2337fa9d2c280f407590ac703401dabf79 (patch)
tree7821c52945952976888db7ef26422fe0fdca2c7e /vespa-athenz/src
parent8a3850679c830c2b56e1b0d6f8c387dfa9b2aa62 (diff)
parent4aa0f9de00fed29c3c3802448acfa53067b34b45 (diff)
Merge pull request #13450 from vespa-engine/mortent/skip-cert-offset-check
Skip cert offset check
Diffstat (limited to 'vespa-athenz/src')
-rw-r--r--vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java3
1 files changed, 3 insertions, 0 deletions
diff --git a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java
index 47ae45a69ca..c010649ed24 100644
--- a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java
+++ b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java
@@ -1,6 +1,7 @@
// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.athenz.zpe;
+import com.yahoo.athenz.auth.token.AccessToken;
import com.yahoo.athenz.zpe.AuthZpeClient;
import com.yahoo.vespa.athenz.api.AthenzAccessToken;
import com.yahoo.vespa.athenz.api.AthenzResourceName;
@@ -20,6 +21,8 @@ public class DefaultZpe implements Zpe {
public DefaultZpe() {
AuthZpeClient.init();
+ // Disable access token cert offset validation to allow existing tokens with refreshed certs
+ AccessToken.setAccessTokenCertOffset(-1);
}
@Override