Dave Wilde (d34dh0r53) 8f999d1c1f Limit token expiration to application credential expiration ...

If a token is issued with an application credential we need to check
the expiration of the application credential to ensure that the token
does not outlive the application credential. This ensures that if the
token expiration is greaten than that of the application credential it
is reset to the expiration of the application credential and a warning
is logged. Please see CVE-2022-2447 for more information.

Closes-Bug: 1992183
Change-Id: If6f9f72cf25769d022a970fac36cead17b2030f2

2022-10-21 12:36:39 -05:00

..

notes

Limit token expiration to application credential expiration

2022-10-21 12:36:39 -05:00

source

Merge "Update master for stable/zed"

2022-09-27 15:06:59 +00:00