[ 
https://issues.apache.org/jira/browse/RANGER-886?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15247666#comment-15247666
 ] 

Velmurugan Periasamy commented on RANGER-886:
---------------------------------------------

Committed to master - 
https://git-wip-us.apache.org/repos/asf?p=incubator-ranger.git;a=commit;h=9c4d8e9cd060747468a94233b0efa30f11ac055b

> RangerSSOAuthenticationFilter needs to accommodate a missing expiration time
> ----------------------------------------------------------------------------
>
>                 Key: RANGER-886
>                 URL: https://issues.apache.org/jira/browse/RANGER-886
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>            Reporter: Larry McCay
>            Assignee: Larry McCay
>             Fix For: 0.6.0
>
>         Attachments: RANGER-886-001.patch, RANGER-886-002.patch
>
>
> The processing of the JWT token used within the KnoxSSO cookie currently 
> decides that a missing expiration time fails validation. The absence of the 
> expiration time should be interpreted as no expiration.
> This ties the lifecycle of the JWT token to that of the cookie itself which 
> will generally be a session cookie.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to