From f9f75217cb9df3202ea9898b31ebe767d6cba264 Mon Sep 17 00:00:00 2001 From: Dino Chiesa Date: Fri, 20 Oct 2017 18:09:48 -0700 Subject: [PATCH] use the same time for nbf and iat when "not-before" is present and empty --- jwt_signed/apiproxy/README.md | 20 ++++++------- ...apigee-edge-callout-jwt-signed-1.0.13.jar} | Bin 34942 -> 34963 bytes jwt_signed/callout/Readme.md | 28 +++++++++--------- jwt_signed/callout/pom.xml | 2 +- .../callout/jwtsigned/JwtCreatorCallout.java | 14 ++++----- 5 files changed, 31 insertions(+), 33 deletions(-) rename jwt_signed/apiproxy/resources/java/{apigee-edge-callout-jwt-signed-1.0.12.jar => apigee-edge-callout-jwt-signed-1.0.13.jar} (58%) diff --git a/jwt_signed/apiproxy/README.md b/jwt_signed/apiproxy/README.md index 87b1dd6..b83d3cc 100644 --- a/jwt_signed/apiproxy/README.md +++ b/jwt_signed/apiproxy/README.md @@ -204,7 +204,7 @@ For example, this is how to configure the JWT creation with algorithm=HS256, whi com.apigee.callout.jwt.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -243,7 +243,7 @@ To configure JWT creation with private key signing using an RSA key: com.apigee.callout.jwt.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -289,7 +289,7 @@ configuration, using the private-key Property, like this: com.apigee.callout.jwt.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -315,7 +315,7 @@ To configure JWT parsing with HS256: com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -366,7 +366,7 @@ the policy to get that behavior. Like so: com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -396,7 +396,7 @@ To configure JWT parsing with RS256: com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -447,7 +447,7 @@ public-key property, like so: com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -495,7 +495,7 @@ certificate. com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -519,7 +519,7 @@ or, like so: com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -546,7 +546,7 @@ those values: com.apigee.callout.jwt.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` diff --git a/jwt_signed/apiproxy/resources/java/apigee-edge-callout-jwt-signed-1.0.12.jar b/jwt_signed/apiproxy/resources/java/apigee-edge-callout-jwt-signed-1.0.13.jar similarity index 58% rename from jwt_signed/apiproxy/resources/java/apigee-edge-callout-jwt-signed-1.0.12.jar rename to jwt_signed/apiproxy/resources/java/apigee-edge-callout-jwt-signed-1.0.13.jar index 1311586894cf69b60afed976b210fa07cc4e1915..09275084296101f836fb62ef605589827fdcce77 100644 GIT binary patch delta 10980 zcmZ{qWl$X7zO`}p0KtP3g2UkM?(QBuNN^im0|W+_K{B{I3?4{uw_w48yZamd@2PXo zxmCBTyPsWauipJ@*A=-~eDxvFT9615az{$oM- z+qQIeV*4LAQX&WumI3ZBSYg>-VG7IticDCRSF9t5*Q3GB!u@U6uOl$S|4Rd@p%4Hq z<>U+(k=V@yaSCalV6*UXP{a9fP-x+e*h&4=lM@@O8mPB~?}?V(i^B4A_FP6KJ$!XI zG2(@%t$eAD_LnX$a=K9lDjE_UFrt1z$;>WV{6s5kBqN0VT^G5#<)ay(h`p|hpu{T z;Dj5oj5}vvw>YJ{ky6G1nQbCX{X_IeWZuqg9F$n+>8ZUd&}pmh<&{E?Qe|bvU}MmH zd|zc?<*g%9c5aTU!$TC|w19_k7jY2lr|zeSkZ_wSD_2W3IFE#F^t6H)=^-YI@rQi% zZSc_=SL7G3ogn;&^!_&0onB)Wf@^;ObGlOl$=qM>Gi#&wF z4>;yq>UKn^s@Lbg5B#@4WvFy$<0{9_M^QyFXQrS9R2rb3r$;>fgFScoY>8;2IbxntdDn7}6vtV5z3^|aYc0%H`e=lB#B%)n#g^%dTqAxSl|22DeslrKiN-0I9pmXk+Ks6wy5p>!E99F z9Kv{uxK^|dSJ6} zP^zPEn8u=0opQ6XXYX+la%2?shxait8fxNNF)?T?kjfOr{3w)|m^?CS6Uq-L_r=Lm z&s|*^3!|Uv>@-J5&5*5A+MULJzIzoG!a&cmGiPe>N5z9Jt3k)|3j5ZzH zUcF#yeMAn_juBN@%5{IP7kWtwWdwShIXpt~fuFxVV!o`Imv)%XMj7!xdOb%1o-}uO zjkQLc<+n{a@0@a0T_@iMDt>q&M0o}czc7%tmtSy{b}{^LeVcOrpdzwP{T7&aA^%o+ z{VjwqTq3dRS7Gv$d&;&J7O;58Q@wC1XK2qVS8@COTSE0#73qbl6LOX*v7b+{*`9cF16>4(uY-MO_tSZgSKE_1W1fY~UUDg?IMLlw14iJ_T$ z8uc@dS>B5dtWc>OrqDlIQ%m+$Rb$h$LT{b4FN}wZ%W~|4LElswCrSwieKQqvs#(7l z$ix^Fmwhh#p`v}FrI>ABO4*_mgT$CBIEz+nu%{KLGE0kDZe-sGWsg+QuGf0fXxO!n zYpC#;l${Y^oI5C+l?Kk2#X{sYUmw<(x<(+BYI;)QpH%yF=yvpEN?>nL{1E}S11huO*$=ypO_iGfN#K;pd zfxBARa@*piLR(tc!xy;4_lZKlL#>3N3l3xQ+1X9#J?eDL?Bv9lm{1FKOEFbD_jfBm zSZ|N5u?;05`pYypLMnQRIr|3g}omwVTD2G7#kDvx7pYl#ZLgjUHIcns$-gOa4Y%o zlro3{fB{FRL(Y8RJn7U~LjzrBgU+gOI|+Imox1~Frv(bf*yh7MLL_g(dA3sh`Z{aP zr~6sV(aJ26OrE=g108ObYcAJN831!`DTF*qALv(s)wkJW`>TvS?hE1)_4;+XDE=q( zIWO78rUm#KH#E3OGg%j}l$CJf#>ykZjH2o-eaI3m3yTsC8wqgoSP zKEU7E#5hkgbD8wO-Xeh_YV+Hw?$j|e$(A;TPvXcFI*xp#e06WbzUSXkAF9tK+)U4L zTF*)^hEfyeyVR5xJ1DX*Qj^AT%20lBfS>$2b0p&=>!Jz;8wma6iO)$5{P?3e9A@)N zeX@N;x3SU~4iUp>o+(-brYDmOL2)nQdL7Vw_@W=)NiZl)Kay*H_6_u&QAtIX{Wp`jVK}qaMJQt>qyshQaag&*s z5JIYc9(O++>O`GHQJl~VumJ_?i|0nKh-{e%wl%DwN8(095?i&ihEMUyoW+mP$^cq? z#6*P1%z%I6@4^LWqd;|%T`Q^rk?gyZ3~7onI_05GHfJzF)2o&WxYHr^YswK z&0Ii5MA`~Lbiv9(jz2;6ftOcgjW|4?0f+ktiCAmi2)-NAL+XHHMT;y3_Vl@yB#rW{ z&ERZj^qQTaDu4t-lJ6YZ(|#h}T@f|~C1MG_0330|X+X_=bW~)HM*Sh%9;lwjh*ypI zDNc&TB@)F12*Vjv9!}FHmh-8$laQMpvkJ5HO?`9bA9A$G9eA$0rk`SDI-+PfehNEq zTr&dLI<=JygbD6cRcIbRbc$~u?rh4{854u|!5J>cd*UOhFw9g1P1kB!i2k1p-7F9H zO0fH-Wq5L2_d_m)88Y5P5&?tdFzWWYeta5Gj~7(Vx4-ENFG;a6$F!&VzS2`wNp+?^ zMn1@$d`SsVWUlP7$?;x1vUIVHa2+*U!xnPC0EYM=s(x+JK`j4p@c7m z%0Y=>k&(@cBI@u*@bixLz8sWE>2`(LB722KTl}e_fD#;ujv2t?s%r;qum~dv_O5+= zL%SYf7g0e;i>*ICrq*^OCfx_GzFtOSOI%!_R3wYD+{qO2H3(P=_h)9J(f46me&y$)+QafyC?OMYi*6$Qd&b*Zt5X(Y3P;cqzP13mTC#Tud#K&5?Y zrL05{$3m)yHOahlma*&Mlm&4BQ0=`LROMMc`ZEjtc-OF_NXUEdrGHqxvPwk z@%%m&tY*_jSpb};|4nZrW2es^bS!_(uAb%;THqW<(5aU?q(s<{(bto^OYjnnWUc}D zz#nAayHBR%HjKY+1!L?qm`f0%3y#x+g%}6B_`A9&V)Gr@HiP|fHLqUQ65X$ujGqj2 zxjZ~tt3*o6Z9J|>`NOoD_x25Iu7i0HfVJ{mA1OCA+konPZyP)o7cz9{_tJ-*WtJ6{ zoYjT8>r~T>aR~r7VRVy*q%q-N4`#x86TQ1t7>mFWSeWG`K|nsFfGQsEw6=H>H3HT!TL z=(4j1-Mh2u_eYWdk~r!17f~Oh(6&2`P*R`HpeL;N8rCJi@)!1$%i@emxrlqwtE&9? z(wjB$u}{v%I2jiIk-T3B1fkHKO%y-g`qS1BRr|HiRBfS51@ z?!dhOKcalb^Q3mlTgqhtsYsO z4V|zOHi!!@i@zpi|b`fY%i%IQ;~R?aRiSx({!UHl3aA-D_&A)bAHid2rDb?nJ=yqK8vYN_qS29%WR^`6 zJgj6^^&JEUXm5+&5FWILk=T;YGBq~eh>nAlt$fLHTs<&h9|qHiA*fNz!qedEB>$bx zKn7c+9-iL75Di?i>M-nH*)x$Es@Sf^{CKA^<5Jmku~jJ^^Y?FfgtRAn8W`ai(InB~ zY|AwJ0G+e7RbKocX;^7&Ydbo17-=_Q&?j=+`eR~lV2KBdc+ns+-ednRY*ZCn7sE+7 zyJ4=(1gV)f8nbOciJ^u;j%+uWV=2#=xftIws(o;cKjc~F2v2ee;v}9>swqAIr*)k!G3_)Ld!K2UFDL|Xx=wy{ptCbEi3FM}_PPs7SGwui)q*dPn(He^wU z&ks}Z3yF|Xvi=eV3&e@Hfqa7xjT0gI;}D+M0Mq^qW0i7z^yZ`(sgh+{et2V4l?Ul! zAqgMZ^xA{sxO)~=Ei|mohxDVbjnguFuOM)9`=T1q&@u<_eX};c1pKw@9N3R zs+-0}n00*f(1YNlte8`E1ZXf`{A9dDa}LbtY5kICXZ6$PV7@v{JdHHFzn4gp<` z@aU*8E-tQ+GatZFb6GcBGvz`IDEdtiK1jX#y#Gg4DnM0?w*LIoZiRmDdSlp}rWdS>)I?*q0ZD3&m=l)J`J zkqDw@T%S%zBH=D07BQL;9ax$P;`-;rcfM*_K{bM=tdOB?i9GB+k?!#GvPL#SNqhlH z^DSGh>!+PO7n^b7K`;;y(iQn!9yeZ>c!NZ(0pKJE_#|&!^2v~LAKPS+rrC^MML(TZ z2gxaT?0JdaU1uXp&#O4<@KI@}2Of6Rn?4gAH4a%~J$(;O1Fw|ZVM}R@05fcf##rY^ z&c{JW}rk)NJrQVwldjPD2j|s_G-3i*;LYXF85j-u!s;wzeOectO!(!^NqfuQQc{DRRRbTg z=+l%1a8}hA$cSNUjk8;n>rQ@HsZ}bIOu>!y);J&AwDvK)8~ z&jDpSF1^`Y9Xu8vxL|%U!|eYF7%Hm_5f43`ol!Pif0J9DeYX^4HISIb=lAvCi{5=e zxcqoZe)<=tfeB`$m9YfabQbzK1{@|Q)X?`5FLghN8nbjf41PvU6DtII^Hx`w*Dz6c z-Qk#VZ6+lt&C5{d^uRDDnD6`7WxhFh5b6aIDBjW1cD)PaaQ)1IK0Ihm9HgQxo+Z;- zJLAkhg;B;YfiN1)F|gm)K#Hoz49a|`cxTjYPl8+D<;||TQrT3IP8`TT`as9^YxKCL zOV~A&+Dv1TmsZ$m;4l~ArvOu2uJ64EUW1+k)hYu}G8;M4zK^EVr<;#2b$XTBT0|Y# zj2BQ8ZEXWp^W42bP z%O#)_E_eemUdy1xvFXu9Fa$U0P~9yZl|tRVS?-3RE^W?pS5ZMUsX>N3-gt z``U;_(UtjaaJD<%<6#*@K&y2;Bk11Hl&kvv;X6IhC~6EXGrRvjJ$79_yZD7Nca|Ce z9@- z5!NslnmnuLnogz^$(U6-=$GzZ)B$+MrlPk|fu=fVKBT_&*}IN{YTkro(=~nkyMpRm z@76h=8d;H1+}x4im95YAlT|YCU4c+XS_Hw=sR@a?-0_pvFGXqDk`{uc)XS-Xhe590 zJatan27cR-4jArOMYXCz>SX0)>GHumbURw^P|Uzg85Tg+oEo`I!-TJaY^6JgQy$C^ z7BmcM_r_QyYtJ5SvaumYL|Sl{ejl<_8hZ@kOXw?$6-%Y<NdsD>m-T|o| zyfG5EU;G9{vYe1shIZDJVME4G`B>@V`oFEpT{G4=!x<>Z35JX73#iWcB;7f4syDi; zu9v=#Rc^qy^CnEyC4lXh$7`SLYmGeOPHq1BP!BnB1PuE0_F<3y#X6r#KK(A*}- zFrm4bwR{BMd{6h0n#8HtFq$SxfA7$RP2ZRmr z^!xWLkJbFV@cHAZP$lF@?T@wf2F_RfQ?Ky!4D+t4&SvbHMae#hbhC;87fhQ=2V2bir@1bi>J^MIgpL-vBzqKr%OvZ9kB zu}*f>yYIAH(@wQ25+-N^vW4QEE;uCPFDJJCY@RFFawqU{KtJ)#(7ZGAiQ55UyY^ir zfQTsS9+NF7ynr6ki2&))%8?mH3=2@x^xJ|i1?Wb;+z3xobZSw>;JThjYfdfi z^J_#gj9o8)n+PBu%C^0s>if9=_B7Szt!mwT9fI z7asbOAR0&7O0!jxQSL@x!ydkH!DV!5h;(4_y+ky1Ng_PU?@VTOUz=*Fo>;3Yth+Arac` zi}ZVzLAp{k3t>*$qQ5S2d(Tgfv5hkm^>WzpfNzV4q9teAZ4X!E5$M0ZLD_TU&4HwKxS(yl2C+4 z0fgr!RRrOd(_IofF!Zo&a<|X9uUXTtq2VZRc(hZfZG}2i!U)CETSmsRkC}h#eiwD< zxCU5gP3K*FFBCk8r^f2l%!3-+z9(^_%s!H~Jy>T|d`>~ck!4w0NnvIX5XHKmu!S%~ zpOnQwMVo~IR?5G?xtWDQ6hAj|xS>rN20DQUmgpR%^A(jD%Bd>ANSx&GlL(FL7NaXg zrFgYW3gQ!V@AMXi&In812iBK9x{BM2I*En3pDD0AY?^%FlSpfzUR%|Y%aTO4Lx(Pr zFugN^prZHxeLFwI)_p|X8N$|VEAaDQn78V&dI>-25t)rTdaKDkYvM}hM!-fr2Hex? z(_Y(BDw7dvPT!fpYp<5-PMIjNAKHe&qZaRqZcc|?V28rAJJ)Y^wQdcFi0|w!2PV0> zV{zsdNDLuW*>WBTIMd;i7YF6nEy{m~I+4{a_%&7r%9%DbDafr*oi)H>F3xQoZO*W( zyNbLEbI5};0T-}H%a7qNWV^zi0*~6^vl+YTbJ$6A3aIicX5Xq@qux~bbB37mn%X}s z=+-u&-1s?$Y+}*%RSZ7xA&wLs!PAbTF?*(S^oyZ3_zD*48bHGwI`E(K>nAsZV52KQ z_BSH;E%O147KwdfC9T=>CY6I(bvjDWJm{>li5FRPj|s_v$Ia!G3MBnE@Nsf?A?3vG zq;N&~!M0$&qo0g(=%90ijPrYz=olI29NC74>2YU4T2(T+$V|FLfEP6zr3vEqiXvQg zN$F*b*0bKBCNcH7?|{lsTtig{Z}{lNrVF};P+oOjS|KF;Ryd(9Lbp@><2<%Ap1#GU zJ(Xj~)3S7AcML;I78r3IXu9^kV@z<*>9_RBxwSkx7je0)bm`YL!pw!pUMr=Lqmu2X~;W;O7Y=aopw%@ECHqRxycT9eT<%5gx&9*XhOzOdZ88|zwC;O$*>$CfAX9LJd9 zHA1vzoLO(P>K(MR+8n{LvmG>X@~5 zmdt$*ms2f*xC6WW1Vl0McrKBzad7XJNHz3=8*#YXd_=|B2l?j&FuRGSf_hWn3GUKv zrZ8haoLBc*ej*&1uWF62ZB~=Ug&V54Ub2Ief!P}`St^BmcMSb?SH~p05V=>+ZfrTr z``#!y+-(ULT1$}pl+CszVtcj+K781{=(t48o!)G~HYgg(0)mtYM$UG@*$S%ht@t5J zeYHdNvb#k(34vcb-@ma=WV@OgB?5m=$UrcZrHwT!k3NCf?uzf;P>H%0$?W&)L0-lL z-3Az-e}+b%NK<#c^Vx@uIty?|R(qkind(+ZCl&4cgFNEhvfEFnqIAwt>yCl~;ld^SB^uWj zeya)vu_LoJ1AN|PJJ2CZ>w8UTvDLwuHZeSyLmSgNfkL{~%u`G_K{r#nVopq|-hpBR z*OC*Puxgj$151)yy$^_wa#Q6x-!WH4HXi9I`F;)S01UDq5-h9Vo8ijIRT6+f)L&=uF3C?~sJ{@HA(x2IUs`#y+k5in%s05xJD0vO2~!LayQtc zzt1QVe1i7Q@C_F>UAlRfB^=%v({>C9$QHOl`Yj8=A9vs%Z1de&Q%iT5(@f;0-gImV z0m0w4n*NA`N1BXECAuj}zmi*io@C7L|15$_0& zbBp5q>t;a#Ujv(R!TW{9;sKlQ)w;i>0Rub7G=C{}ol^buDVo*X8Wff5LLiM1?)BZ% z1#g(#H&#QwKUGxdSbURm((yjcW^4QY)P8BTL}b15(AT{$eP0QHet$Boua@(2JT6?N zqfd})FvKJ{ehWbYciD0u7N_CJbux2oczfguL`BU2!u+vVq!($N%v9h;;pEeB^096>Lv@iNiTEjz8z{ z&e~*8X1LArPwJ|S!e)wlr@rur4BXxlWei7L{Xs`lD>}1E zrWDb>!JztQS!J2lk;djMw|xlIL|KcsTz;QNyXaVJI_SmULruG+H~p-pOhdJtc%PqJ zv!mo=DX^SBQ)9;t(H^W*;BNt4Q(&N}?TGC{0&yid?D1T7phb%-@neDu2-Wls+K1ZdRvFp>@UjOo*vTFxbQx&GSKbJ_9vEvQpN_ z`g%&~O8uEfXU+}`4e1KyWyq=az5R5UD5s*cMls~(ARv)DBqK)4G>Fy; zGmd?wSJgcbPI*8qP(kO?=00}6PqabdNxop&y!H5vR#XwT6~S3@@vgyO<+ufLyS}E! zv;KXHwUp&g!rfxq?8CEFW_fp`q$gqlQSNhmWzv=}W2!brayz-jY*+YHo23(XZ;NdS z`KMA7jgB%v4KRgT7r=OR^G*;jBPtG8v5q)}?`xvl3;bg%Bl0cQa|#0FX+wtLB{R1% zG~RG@E3RY{<*9S_X-NFO7uI*^X`kwT6LxX!8T2q7xyu&0TaCQSeRB}G>x{gMd9ymY zBf9(o$aRLUa^}9ciHJEj+du4K0v+Z8?<2crYjb~JHh(-R1_JL4ubwV5Utk&sJ&0~{ zeo(e@<6IGFU>2+ze65fFNUaT4y|UGZ3j$hF-;j-DMpGz}PQI-3qBm+tk-YRg=+r&S zER0(`EDW=`>Uv@cmv#;zGw!^=zGjjJvJFY!(89oUsQllVBv2$jpgxL|<)7%EAHP`r z4R^?EyWWp~@1I!UN1+$$|DRQ210_UY*B6>{|D!LP&;7#&t0|0Ef0XMMJRD*o=#z)U zD-68=^?y7*!~Sj88+x_>Lt>wzf7s(2gZMYW2vQE>ennW2*y{;?2C={5Hi-8X9KoWm za0`}yMMtpkD;|R_USSquf%2NHdd*ychC+;9wfCXUn6KKuuNedh)qd@G2qlA4=LDT0 zP=ml>SRnbZH?OKm7#UnQ_rFxCSEc8#62|{;A9nbgcdz4Rke?>!QNzFlE5X2U{YTUi z66_2T50{{P^&rFr@4tbAftmZ8{{sA%$HnyTfbU-K8)z~d{~t3o1F*{JuUP{T21fY5 z%-iPwHj`N3GOH=V!r{aJPmZj*m}=e~0|rKw6b6R#zYgrM`qzO}|CH>?HMRlzTS@{F z3=G|W852R{5dccWza_uQe~b8M!T%Ru0SWf<00nvwg7_mb{xP!fpharI!oZaM-5CDM z*yaIp@S+7pN8-Ld@9ao2I4iHe3M1Bk7XG*AERqbC8iW-^{%T{1B7+<91x@;rgKVR4 KkhFqchx~u%ox~Ra delta 10925 zcmZ8{bx<5l^eyflAi*^Rm*DOe+&#Fn_~Nj*`vwp04#C}nySoNiEV#o9U)7V}o2r@9 z_sr?;d#CFDGkw4bFt712Xv%W1a41kvNKjBR5eaCYVg5bYtEi1$VJ1r?bFc&)K4x(h)D=7@m|1WUtd3zco1 z<@f}C3}hM)HE;|>Xnl=#$e})cHv@eo9iIcg_>58&EXD8H1|e3xo(1;tkxL_7b)H9c z-+FvPd2IKQ2rTrBbO?6m+aRqR?L@K4q~~_Kcd?foxv9|Dpd0Y0ykv+7moPKQfh(lP zGTu|M{)DV_d%1D!vjr|g{*0oeND4R&FN(a_1TP~~ftq(A#0t0bHk#!sAjT&JrO<*# z`ng6sf@ael=Cicae&i2>Y{n)icM1aCDB{~WEM+RQyY^3|5eS+Dip03uk^0r2VM5s; z8O50*ZW1}SGS3vGY1)0JAB2qux?3Z@+%H1`&pyKLaIwX(bJ$Ct4w8<@?h_OVr+9@f z=kw;lfw=RPhZ`%w*j1m6TfIW7NFH@dukn9=<56D#|8xu1#pa+H98G!^$`cEVM5JGH zoxcshIJpfv>*i1>{Hurd5fS-Xbp2PtO>`pJxAo($ayguShahk4!qc^FvBC`QIlf_9 z_Mc?k)_=)kZVJNFO@6+@&3%=@Luu84)-8283Inl8OyYJH%vM`jQsGfOK*ktqAR$^Z z8iuBaN`b2P=^NHKaC*J6D@r(0dG`p#{vO2&Gn@r&@e}nu!b3l~w6i^fj6<6~(G}ep zua&%p%n1)YUlJ~x*puax#aVY@f`tY@ZEP)JaVd31Ticuu)-yFm3$#TYpL`!P;j4X1 zkOYxz=1LG>Hiy^oNDEASu(8>=&`EPk;>ohv#=6F$k`lXqWUO3rT?uQbaRv zI}2?qVvc9;nCOk1=GE_Qs%OCA!f>5+`A|H&e5Wjjh-6((cJ2fV1yza&1@+#7xKKz) zNKpTOlZyY>q;>bGXVCAh=3~eL#)8KNF`L>MySNnUA^YIYzr4L{oLF#W4EOAtU{kMA zAZ}v?qm#=bVUa`EK}VM~Q_E?~xb2>WiUTSu8ydnI8|U)?f;IzLKZ^zTb>KagxAm~X+mGc^ zdlUOzmzxDg=X_mfML4fv>KpOH4v=Rh?wDnCx{*06#GWui2fQx^@F}mUPfmDO^bC$I^zJYj&WI4k!+!U$2h(_Byn#Qgs`#fV)dgcBS?%ekQR$y#&YKFK&nP)4Xme$q!Tp@mQlG1$ZoY+Uh zebp#^n_9-AmU&N`2wb4*T$_53922lqDn)l+brgOSPnAQqcBW9XWzHtW#;p|JT6A_B_b7OoJ-~4&2}v4 z_?*>?Q6M%^8TRU4T#?L8Dh`Q$N4V>_XTpk-?U$?Q(89)?c=wzok}N1qKV)uCuK(u41BWnd_@yD zHh)ywYa0G&61;Sal3RzU8akJ<97DLcUu4#qqua$d&VKBatF9H6SGODy0Gn{V3!4WA zFd>j*`^V2_QE{NwIqu-ZP1jQIb%-8hbs55MlZ|_KWYZ-_;y5cuIdc~UC%C2h!VH|M z#3=2vzcBzxa6Mj92hF~X$iA#FBk z&P0^k+5%Xy)tIh#@M+FoFeKWQ6jQZ$4W;G$l!BZF2{KylH3-#$362V3uJaYKaD26a zycnZqPvQpKBJC`ZvP4oG*4xTfW1ic}llz_8mK7Fy)c6%TEj=s@i1`gswQ`Ca_@AK8 z(y`B|@atdYRjXz7u{3gVuc2F8{n(TPi^;&9g-oo2D!#4k z!*)wc*8g;LoJNeEFp(23NlR>Zbi7O)-8dYY7mbay`zXRe4Qx|cC0)y`D#nkijd2Mp z%#OWZz%u&j8LAqC*BmyC2eVs1a4i?mI1I8MC`oi}CfDb(YkBp^G3EdJ_1JO0)k{oE zsdvv6es??oLyjsnIi)zT5gxbd2>G{3K$Vd~-A(X71fu(ZZE?10Lk_fHZB^)f70+yV zN-!7K83gI}x42Onysj-{Jk&V$SHPapyuFIQIlqbN7HV-w|kBdF`l??NE; zv|>GlT$va;iv?v78;R2+rU23@t&kks0fIpYgiaYYd5w@4c&{)6;EzIt`uQrP7MY5l z1?}*)qIj?(1WQM^{sxghujif~d&N#Y!=zRy*F|&4FM$oXZjfL_+le$ z#3FpbWe>JwOGhX$W@bH!q53=c$pfHyKzr z@krGyA|$jf6BMt)kcU&^f6SXU`qZn!TCW!5R-lJcBEh;wfOW%RmoklCdJH<@Kv%

z6kNHAj+wi z?tvJ43E#)t>U+=$}KZ_uun8+{vH&l{=UlF=YHeru9n&9+JWRbk4IOGm@E z`fXMM1v}PdZ*WagFBH&l;Ok(8T_7bm-YDUYcC{X~8qVM4zfaY4~Q_?uOh8gL?f`Q3|J~IV!KEtwac_{ zEJsds?BfvEY)*)JwvaBFbxWe$2`F)#C#a8BbE280Lb6{a2m)PM(vK1!e1?T3AgU9u zcPfrRu1kM@1;$jyC$!Fw8Y4g!m;g3*)>d%PFUJrqE-rGz8O_F?Bt9+9Ms6l}dM4Wy z2od(9X*7Q9Nk3t7j5(pORb8gj$-G6HA4vJosK5&rX|7S5no%S)=pvo8|0T1BgmXr- zZlXEvrg;WgkutA;VhjNm3edEJRuY%(6E2YLZTSMUKQVmZ5SDT*zNn7t$m@ttIO7c4`M|tZ#^tW zkb~C8kScm0Fr=z#cD}Clv5=UrY}NG!xb!T77}&A22TEg4*e*4o)ko!TJ++f(NVy(8 z<)%6@FPfw!Fxj*mstQNfedB=+8v;Ojw`By3im_%DMZ=0X6}p9qgESWjYuxzJ znRhIWjS(EbV}}FaH-?hXZWwNUR`~(`dfX6ED~5V~?=UL)IPZXdljucov1o+z3Gz0_ zfN&VD4mx%Zee8G)%6%<)H7n7Yw{3l_%YDszwJGT;?V=(P5bxqbjW1h7zrnl-6&*av zWH&T!6g{8jM_}25Z}kEnRj3^@?L55=pA)iHb|7$H!9YJ{=g7q5z81cYtMjE=G*S{k zgdts_UUD7i!p;`n$B^b8PBd$J`F#`HL_U}V(6<7B`3LMO1;(I?AApGK5PtYZ_kO99 zXos13Wbuyj4fgw8ACmq4F^SR@`SU@{?zOpfk`okHs=8Q2wMJU9Pv7w))A(h`u~u+U z+>#~pW)SWOHU(iJ!d6y>?oH7(t>{2iBvz(0w@iD^1C+OumMgRv4yi&7dingP-rCL$ z(1r|dz&9OdIzs|V-`@^9M;)0xhFck|ts_%Eie$@Ht*tO(faBIyI_b=aWQhiN%c4Jx z)CA*IC^%{qsYZ;NN9?|kF+@qjrBoU{qKUg$FNf|gIHQeEIir8?v&DwRP|!nTQX1v1 zhXLTG1}@KMoKk;g5sYEI$JsD*{=M_!Q#a=;ar{;N^imL3nl0GSLp zHqfcb$CSRvN)_2VURmloOqY-b-^8-IWG@TkMXU-RK=WF(ofv;xm{ zp#y$F2}x$4+{o#a%p0Z{*E$Uke7!sP;m}U&^+$3$YLvcMylg#`OMzjr;V4uySA%d( z%z;1`&#q0gQndJYHVrl_&j_2b2Ph_Yd@lZrB8d(Pxtayh3h@ohoMma3;^G80daA9} zRlN&3pmP}m4h;~n4;Fha&1IUyhc24!-wkcl=2u!wCP(7|f6`wwtj(QAhK3Nh6^QED zSjDXT3YM#nCiSuSC|}=5ETF<-&EQ%&Jf#^Z*Dk~O?5R5E)X{VGr&2aj1Ei|o|1pTS z7;PC1kmNNurCILoTDd%>ThAHVsL8)MrCYd+Ih)fE;rrJmBexRV#Jpi+bu7upRdRsC zB`m1VR*$+>(BO8X=jaVyszDtufbkCO4-ooP7qcSitZ9rmQbX(l{}R<8hXw$<(NTU3 zD!$|hW(mFgyN;lB$svw+0b0kR3HJgj(c-hSC(jt$Ri4bQ7uq6e(!`L*;w~@Q)%?Z~ zKc0dzR9=O#tTql~>kEteirSB4y^02C6U|F&hQqpyI87EssYKtqV540C*?=IwwbMUK1EOx?R25Mr@RL_9f8+dz#bJ5V4ae z%aiD2p&v?Tq4ua{Qu3PdJANJzbV{(jtA$qgo^VA8=JhL#JuV zI;cY=pyaytQdt`>EfZHh?OXI&EX>qrO|f&?`(EBY7vrUjlD%i`K;8Y5d2DRzW12Cq zNtx&*BWAmKuj61%jP}XHC?h;GEyA7Y&k!n1j-zC z#qk;G-dgC#C;4Of@tm5(X5gG1MhNWmI_FKd(+00R!pc-uNwS$qnddQHB&Y7MtD*p9 zo|&O8&q(oT5*VYOn+r)=O4Kfe=IqDGDjR{igPODi6|Q&{54CzwATz3~2v*HW^mdE^ zDD=W)6k)vqU71C2LvGC=^AaB&su9J%)wBGUMU>GLwGSt7R`b69fUfurpOV0Nk7j~& zPn9a!&(?Ux1xQP?i^9$kCE9dl3S|)$aWmX!qt{CwIn~9;CY4#Fk(tG|;~J7kwldD* zKzNonBQb;Kf=TF@}bwb^EaWh=;!QSBrSG$1S$hlp9ebW1sbZ3 zZ3MKAYa7YIbjQ21dQ<^0+|EhrNT|+Kr_PUrDT11YRou3n%P~chg_>z?)&u~?&!nZ? zG@mY0KY>Mj&QqxsX%m26{sMP6C@pjN8hdjkkR5nqtGk*?KY3WDbysa`Wp(}ZM=eK2 zsoGP`Ez*N~*D{Ch04=Zmqg1cxs50i8(z z9=mQZjWYZTIQ3Q1lOyz1&SConK&i^{p=n5? zC^YkDl6Dwy&VcT?Gti5xZQP01E_G6Wf<61;wyxVR_E$D3bN_7AX=L*!b7X8#>dzk` z3mtffvLqChFXX)G447c>5vw^{gE|>arZpy0cNA*!lFAW~xX4aYsCe-LspW1;yL#3K zU&E6G6TEsX;gssku~Ksf+QVchBPGw@!TJMv`JpB8@WN3RF7Q-Zk{ubREX&`>bXq)( z8SlO%YHBv6v!7FY2d$2nlBcgUK&v+-YCD{BWzEqLi0+rJ2;c}?P=S@IpN6jwSUI9x zk%9hU;EH@RL(>|_Tv$#gu{gu^hzlrYQRZG(6m;bt@Z``mKueSd6@R%y zI*EoE!KC6`Mz(3yf^8jj70>wJoLXy28)bd2jd@|#&q8WAaGu;!*rzb5Z3_OQ6}+-r zkM7MUG50TM=mQ)wLv%C*g4Uc5Y#jU$p%NQ3H9ctVW`F3FTq7xjJS%{0JmLLb zIDC_eVH}dm8OZWwrAx{L*$P%jchZbw_+>aTHBf$}BmeoN1}YI2UA~qjl+G?1b`?yT zMXwJOvK2EhIUTDLAr?DV&l-2>R^C?QDs}o&B6i@Cs9qj;JNCyjc|t@0cSYn694kBG z774j}GVlJ?zFR0~)+A?>n)4sy58G1lN=Vx1&O}){MHZr<^m2^p6TzuoUpx(?p`Z0d zWzYhXG$en;S`%h+B+pa9F4|rtd=C6$!seF6UFDb!Y+^OZqs^=O??BUj`fda z!AT*qGUxRa24-Sj6XY^3aZ_t4a&JNp1L2h zwr;<7)J{q+Ghvd-|bix(9sAouxhV+4#Ps%PCA;kkt${I-r0$1jV*Pjc3$kYwr z)Qg#O`K+VUP*@{KDKXt{XQ((L{6yxj#reWWL-vFbT%LHM55aU+(qJoTK)s+V9gA$< zDa|RI0tg3T{99jJ>@icj!Y(}u5!*!-S*$qIe4KJ0=}4(xD&b!TvNE~5?v9+!YjV!B zAQkO>9lvnRd*T%VOE%)UY5pU|>ii`giUGR}qgUIX?RR_U?Xl1W2P(`XWI=|)&~e$& zaUjv%BOR<=Esmh9{FZB5@;4aH>8QW-U4={@ZlKvwS%=#6k!I+#l?ZG#Pde_z=D#wD ztO*4I`Xi&ktlGXzEQmYlvXm^mOv5~)1ANs(ppTvLg!eo#O8MGqs;Zp3vRiXP zf@mM%cU$naN;d=Ll1*=;1(w}oNqe9-qBtnUf_i}_y8nSrY6q)=E28LIp z8w#cc$8*Mv844!f3eRM`A)FmP0R=UYnzB+>g7Dr)jQ|d!nNx+H!+}6ME|25KjBwvF zE_IfX6J68%jP;;b#_&{HnFk@S%s8NROEpn5h}SzgEJm+E{75bj#Q60GY6SW%0UdP8 zuvJ&`V^D1T_cU(54YKd=6SKBm<;QyEQEp06V}D(Xmoc z;^Qe%e`Z990!%u1xKGWvphyKhWflaJQya*j+FZvKai*KWPspjKh#$!F!OUxPU$Il$ zCC<7`qFB0^{4n{v)b7tcVhOEZUEvO!sEx2eG}2MxywO6DpgOHG)mB%1I81KPT)^4H zep!ALr}1_(zqPzZt!blU)eb8>-szRO!LI-CE7f_QP(%1>N-s?D5`#ptjy@Id zPm0%>yscFm4xC+vQf(&j_TyFN|NZ}^*d3#o&tecHJ1oW=!O-F?*4`u;LPgp~3=Na2 zB{Q=RTB`_3GEh1YYa(hUkvb96MNH~IQe7WTnQJJkLA#7>--(UZ*I zoN!=nD(->}rA3?!nKzsern9xreQye?c zszqCG1?_?gN96YbU1Uzi&x_u!RTI8N&-1bTin{`)MKO~K!#Zo1wZFz6#4@h*diF3$ z{vD58&(1d~SKZuhchp3b$4yDEsB|INJy@|fy8}kCAGN)2L?4?$lRZM)2SD$k-G_dP z$AXUtw`xKM-|0n>>4;}*+)WQ5g&NXihUSERBMMq){KP$ge+c zVcQqEy;8zIB;$T)pO+^`j@BJuBBv1N#=o-fBCrFUqdM6asxE4s632o6cZT$^O_v|4gj*I5kZ`tocb?MO?z@ zuf1N={0mCVwNC(XY_ZC7!l_BwoDJri^uZ|yHkJRi<=m;du63j6iI0xPMn&JXPHL4C zgc;={zp}lc7S^$eh}Z)bMrmW!vst>`ER$kU~^G;sO*dWONDajq0G z#|$1#&s(JRxwCo9neneG_zxz+r#*j9d@XS7ND>%BD``4Wf4mXGM0u017#2S~qnGVE z^igj}AA1S|c3@@ppy8A|)1HnLg=9AO#a+oji+lZlh71n+H2h!!QzW&FnTCz)tOWsk zN|(h`jmT?HAdZTJSTwfmYD9N~YXH^_`#w)RE8Ps@{kJPPxeZ3?ve}Mjor@>`Yv#^r z*Mfm-yw{(>GsC91wusSO4}77-=g{!`cUI{W*-aBFv1&J~NO?&|_@sw9bK4cN$ z{33xDB!!VA3vCw^6KZGKCQF^;L-f|{L0=!+d8VP{xu?{dw(?CxxoHn`fYw}&-_lE< zr6pnj;*?mXg^3%Aom5|?h^kMO!`%CXIMmh5q?m-UK@Hjx9HR;iQD_Yy*gQRy4 zQl8Q}G5L?yU3T8x2Nzx#voB~x84j3B2eF-E4xrphtieCy>fwHd2~CHrB=tY?wKp(z z&OdLMOd20hJXTfD>3Pk0^80S;m5tvLvk5A8HSK*`KVXuSVQcNxqZArExQV^>nLNqd zx=9~Q`R)*r#J>;SDS%qp;hK9*c|aWVd-{8Il1F+b=2@ZSOpAI^UY(fNXLN<@*gLPd zgh5a`qV?BR=K_=qubQveR%C(_m=yiDv5h-+4#UP?OLIC^8AqFy$_g6m4c2sbXV(C`9}M_-8AC0{_-YGjl@Emt}QHUfjL*=ut9Ggg&^?~<=) zS$qnUvMkLTREa)AY661{AAZpbPRc4J$EauqD2##3PUuQPatd6jCKVB|Nf#B$NY3{m{(Xd;-mOFt2_j_P9pnJT zfdc2wi^FlU1A-n1qQ_XaPO}T;?s*|QhJB-N2t^m3tyzXSdiRnZ_bFT3hD8n+=Ox)7 zrOgB3p3$yv!Uw{A(r+Q0uM7uQn@gkBSB!o^lYh89k>5}w#=8;_pTn9iSJy@dw*iXX zKRX5uHTv&p2N09MWU9=5vMmpINrRy3QXiozfstGkjaYgyoxIA{@%jh{ZAC&c~ zf0rwAs@#;yLi!F{6ctpsOG_c6Wn$}v^Z}qsFA~@hndVA#5CDd1^(dbzK6BAVU&LrH`$vP9UAR(gjHl4L8gl1X7BxkqOAP{X`$0z=HS61^nP^=fAt7|b@l&#)9x1j>f`^q^HBcqoN;ize+8Tr z9y=haLOdFG0|>tiY@RJCfv%eP?`Dr*Z!2D|L%R$%m8u^xm92{PLoYO@`5yZiy8IVk7%%*X!)7yR?|i1y-hXq0fMV|+CP#OUx+kE^yPxUbDMb5! z$n074A1-)B!vC`?f=&E6-yzLkYod1tkvLK)w93Lz}{;v5}MBEw<0|k``|Nmh~$iWd>g67*g=m^XwNMpxh; z%K{D!!FgxW|1o-oU}zH-@IlCjcjoyYGiCgb5eDmoqW!l;buq=FD;gA(5)l;C*Z+}5 ziP=9PGq^4k=Rctn`@|0TU%qh&P*9)$htS6fTJava JWT Creator ... com.apigee.callout.jwtsigned.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -136,7 +136,7 @@ form of properties on the policy. Some examples follow. com.apigee.callout.jwtsigned.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -162,7 +162,7 @@ There is no way to explicitly set the "issued at" (iat) time. The iat time automatically gets the value accurately indicating when the JWT is generated. -In v1.0.12 of the callout, you can set a not-before (nbf) time, to the same time the JWT was +In v1.0.13 of the callout, you can set a not-before (nbf) time, to the same time the JWT was issued, by including this property: ``` @@ -247,7 +247,7 @@ To generate a key signed with RS256, you can specify the private RSA key inside com.apigee.callout.jwtsigned.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -288,7 +288,7 @@ You can also specify the PEM as a named file resource that is bundled in the jar com.apigee.callout.jwtsigned.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -329,7 +329,7 @@ the Properties elements, like this: com.apigee.callout.jwtsigned.JwtCreatorCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -362,7 +362,7 @@ For parsing and verifying a JWT, you need to specify a different Java class. Con com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -435,7 +435,7 @@ For parsing without verifying a JWT, you can specify wantVerify = false. com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -476,7 +476,7 @@ To parse and verify a RS256 JWT, then you need to use a configuration like this: com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -530,7 +530,7 @@ a configuration like this: com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -574,7 +574,7 @@ Do this by specifying Property elements with name attributes that begin with cla com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -614,7 +614,7 @@ To do this, you need to recompile the jar with your desired pemfile contained wi com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -643,7 +643,7 @@ You can also specify a serialized X509 certificate which contains the public key com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` @@ -676,7 +676,7 @@ those values, using the modulus and exponent properties: com.apigee.callout.jwtsigned.JwtParserCallout - java://apigee-edge-callout-jwt-signed-1.0.12.jar + java://apigee-edge-callout-jwt-signed-1.0.13.jar ``` diff --git a/jwt_signed/callout/pom.xml b/jwt_signed/callout/pom.xml index 4cc3ec2..c08599b 100644 --- a/jwt_signed/callout/pom.xml +++ b/jwt_signed/callout/pom.xml @@ -5,7 +5,7 @@ 4.0.0 com.apigee.callouts apigee-edge-callout-jwt-signed - 1.0.12 + 1.0.13 JwtSignedEdgeCallout http://maven.apache.org jar diff --git a/jwt_signed/callout/src/main/java/com/apigee/callout/jwtsigned/JwtCreatorCallout.java b/jwt_signed/callout/src/main/java/com/apigee/callout/jwtsigned/JwtCreatorCallout.java index 9cdcf88..501ff68 100644 --- a/jwt_signed/callout/src/main/java/com/apigee/callout/jwtsigned/JwtCreatorCallout.java +++ b/jwt_signed/callout/src/main/java/com/apigee/callout/jwtsigned/JwtCreatorCallout.java @@ -286,15 +286,13 @@ private Date getExpiryDate(Date current,MessageContext msgCtxt) throws Exception return then; } - private Date getNotBefore(MessageContext msgCtxt) throws Exception { + private Date getNotBefore(MessageContext msgCtxt, Date now) throws Exception { String key = "not-before"; - if (!this.properties.containsKey(key)) { - return null; - } + if (!this.properties.containsKey(key)) return null; String value = (String) this.properties.get(key); - if (StringUtils.isBlank(value)) { return new Date(); } + if (StringUtils.isBlank(value)) return now; value = (String) resolvePropertyValue(value, msgCtxt); - if (StringUtils.isBlank(value)) { return new Date(); } + if (StringUtils.isBlank(value)) return now; return parseDate(value.trim()); // unparsed date string } @@ -456,6 +454,7 @@ public ExecutionResult execute(MessageContext msgCtxt, ExecutionContext exeCtxt) String wantDebug = this.properties.get("debug"); boolean debug = (wantDebug != null) && Boolean.parseBoolean(wantDebug); try { + Date now = new Date(); JWSAlgorithm jwsAlg; String ISSUER = getIssuer(msgCtxt); String ALG = getAlgorithm(msgCtxt); @@ -463,10 +462,9 @@ public ExecutionResult execute(MessageContext msgCtxt, ExecutionContext exeCtxt) String SUBJECT = getSubject(msgCtxt); String JTI = getJwtId(msgCtxt); String KEYID = getKeyId(msgCtxt); - Date NOTBEFORE = getNotBefore(msgCtxt); + Date NOTBEFORE = getNotBefore(msgCtxt, now); JWSSigner signer; String[] audiences = null; - Date now = new Date(); // 1. Prepare JWT with the set of standard claims JWTClaimsSet claims = new JWTClaimsSet();