Repository: incubator-ranger Updated Branches: refs/heads/master 093ea3da7 -> 9c4d8e9cd
RANGER-886: The absence of the expiration time should be interpreted as no expiration (Larry McCay via Velmurugan Periasamy) Signed-off-by: Velmurugan Periasamy <[email protected]> Project: http://git-wip-us.apache.org/repos/asf/incubator-ranger/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-ranger/commit/9c4d8e9c Tree: http://git-wip-us.apache.org/repos/asf/incubator-ranger/tree/9c4d8e9c Diff: http://git-wip-us.apache.org/repos/asf/incubator-ranger/diff/9c4d8e9c Branch: refs/heads/master Commit: 9c4d8e9cd060747468a94233b0efa30f11ac055b Parents: 093ea3d Author: Velmurugan Periasamy <[email protected]> Authored: Wed Apr 6 15:01:07 2016 -0700 Committer: Velmurugan Periasamy <[email protected]> Committed: Thu Apr 7 11:36:43 2016 -0700 ---------------------------------------------------------------------- .../ranger/security/web/filter/RangerSSOAuthenticationFilter.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/9c4d8e9c/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSSOAuthenticationFilter.java ---------------------------------------------------------------------- diff --git a/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSSOAuthenticationFilter.java b/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSSOAuthenticationFilter.java index b5a5268..9d5680d 100644 --- a/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSSOAuthenticationFilter.java +++ b/security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSSOAuthenticationFilter.java @@ -393,7 +393,7 @@ public class RangerSSOAuthenticationFilter implements Filter { boolean valid = false; try { Date expires = jwtToken.getJWTClaimsSet().getExpirationTime(); - if (expires != null && new Date().before(expires)) { + if (expires == null || new Date().before(expires)) { if(LOG.isDebugEnabled()) LOG.debug("SSO token expiration date has been " + "successfully validated"); valid = true;
