Expose role token expiry

1 files changed, 5 insertions, 0 deletions

diff --git a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/api/ZToken.java b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/api/ZToken.java
index 1691704afd6..1d3f6f92498 100644
--- a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/api/ZToken.java
+++ b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/api/ZToken.java
@@ -4,6 +4,7 @@ package com.yahoo.vespa.athenz.api;
 import com.yahoo.athenz.auth.token.RoleToken;
 import com.yahoo.vespa.athenz.utils.AthenzIdentities;
 
+import java.time.Instant;
 import java.util.List;
 import java.util.Objects;
 
@@ -40,6 +41,10 @@ public class ZToken {
                 .map(roleName -> new AthenzRole(domain, roleName))
                 .collect(toList());}
 
+    public Instant getExpiryTime () {
+        return Instant.ofEpochSecond(token.getExpiryTime());
+    }
+
     @Override
     public boolean equals(Object o) {
         if (this == o) return true;