Skip cert offset check

1 files changed, 3 insertions, 0 deletions

diff --git a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java
index 47ae45a69ca..c010649ed24 100644
--- a/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java
+++ b/vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java
@@ -1,6 +1,7 @@
 // Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
 package com.yahoo.vespa.athenz.zpe;
 
+import com.yahoo.athenz.auth.token.AccessToken;
 import com.yahoo.athenz.zpe.AuthZpeClient;
 import com.yahoo.vespa.athenz.api.AthenzAccessToken;
 import com.yahoo.vespa.athenz.api.AthenzResourceName;
@@ -20,6 +21,8 @@ public class DefaultZpe implements Zpe {
 
     public DefaultZpe() {
         AuthZpeClient.init();
+        // Disable access token cert offset validation to allow existing tokens with refreshed certs
+        AccessToken.setAccessTokenCertOffset(-1);
     }
 
     @Override