[trafficserver] branch master updated: Implement nbf claim in Uri Signing Plugin

[eze]

This is an automated email from the ASF dual-hosted git repository.

eze pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/master by this push:
     new d9dc0f4  Implement nbf claim in Uri Signing Plugin
d9dc0f4 is described below

commit d9dc0f42e9f161f8a943483ab8dc38d178b18e16
Author: Dylan Souza <dylan_so...@comcast.com>
AuthorDate: Wed Feb 13 20:49:23 2019 +0000

    Implement nbf claim in Uri Signing Plugin
---
 plugins/experimental/uri_signing/jwt.c | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/plugins/experimental/uri_signing/jwt.c 
b/plugins/experimental/uri_signing/jwt.c
index a38565c..69a07e3 100644
--- a/plugins/experimental/uri_signing/jwt.c
+++ b/plugins/experimental/uri_signing/jwt.c
@@ -98,12 +98,6 @@ unsupported_string_claim(const char *str)
 }
 
 bool
-unsupported_date_claim(double t)
-{
-  return isnan(t);
-}
-
-bool
 jwt_validate(struct jwt *jwt)
 {
   if (!jwt) {
@@ -126,8 +120,8 @@ jwt_validate(struct jwt *jwt)
     return false;
   }
 
-  if (!unsupported_date_claim(jwt->nbf)) {
-    PluginDebug("Initial JWT Failure: nbf unsupported");
+  if (now() < jwt->nbf) {
+    PluginDebug("Initial JWT Failure: nbf claim violated");
     return false;
   }