8f999d1c1f
If a token is issued with an application credential we need to check the expiration of the application credential to ensure that the token does not outlive the application credential. This ensures that if the token expiration is greaten than that of the application credential it is reset to the expiration of the application credential and a warning is logged. Please see CVE-2022-2447 for more information. Closes-Bug: 1992183 Change-Id: If6f9f72cf25769d022a970fac36cead17b2030f2
11 lines
521 B
YAML
11 lines
521 B
YAML
---
|
|
security:
|
|
- |
|
|
[`bug 1992183 <https://bugs.launchpad.net/keystone/+bug/1992183>`_]
|
|
[`CVE-2022-2447 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2447>`_]
|
|
Tokens issued with application credentials will now have their expiration
|
|
validated against that of the application credential. If the application
|
|
credential expires before the token the token's expiration will be set to
|
|
the same expiration as the application credential. Otherwise the token
|
|
will use the configured value.
|