From c83ac2472da15d85ad32c8ca72cb3e65b86a4bdb Mon Sep 17 00:00:00 2001 From: Roeland Jago Douma Date: Fri, 7 Sep 2018 10:01:31 +0200 Subject: [PATCH] Expire tokens hardening Just to be sure that the field is also not 0 Signed-off-by: Roeland Jago Douma --- lib/private/Authentication/Token/PublicKeyTokenProvider.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/private/Authentication/Token/PublicKeyTokenProvider.php b/lib/private/Authentication/Token/PublicKeyTokenProvider.php index f6a6fc3455f3d..73bd7a711dca2 100644 --- a/lib/private/Authentication/Token/PublicKeyTokenProvider.php +++ b/lib/private/Authentication/Token/PublicKeyTokenProvider.php @@ -80,7 +80,7 @@ public function getToken(string $tokenId): IToken { throw new InvalidTokenException(); } - if ($token->getExpires() !== null && $token->getExpires() < $this->time->getTime()) { + if ($token->getExpires() !== null && $token->getExpires() !== 0 && $token->getExpires() < $this->time->getTime()) { throw new ExpiredTokenException($token); }