Bug ClientCredentialsReactiveOAuth2AuthorizedClientProvider.hasTokenExpired #7558
Labels
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
status: duplicate
A duplicate of another issue
Uh oh!
There was an error while loading. Please reload this page.
Summary
hasTokenExpired on ClientCredentialsReactiveOAuth2AuthorizedClientProvider don't work correct with clockSkew
Actual Behavior
private boolean hasTokenExpired(AbstractOAuth2Token token) {
return token.getExpiresAt().isBefore(Instant.now(this.clock).minus(this.clockSkew));
}
Expected Behavior
private boolean hasTokenExpired(AbstractOAuth2Token token) {
return token.getExpiresAt().isBefore(Instant.now(this.clock).plus(this.clockSkew));
}
The text was updated successfully, but these errors were encountered: