From 237903b19dc9589cb4dc934e32f3fc9528689455 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Sat, 6 Apr 2019 13:45:47 +0200 Subject: [PATCH] bump fernet/fernet-go 9eac43b88a5efb8651d24de9b68e87567e029736 full diff: https://github.com/fernet/fernet-go/compare/1b2437bc582b3cfbb341ee5a29f8ef5b42912ff2...9eac43b88a5efb8651d24de9b68e87567e029736 - fernet/fernet-go#14 verify should only check ttl if > 0 Signed-off-by: Sebastiaan van Stijn --- vendor.conf | 2 +- vendor/github.com/fernet/fernet-go/fernet.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/vendor.conf b/vendor.conf index 3a2c8f729a..7985cdaf97 100644 --- a/vendor.conf +++ b/vendor.conf @@ -45,7 +45,7 @@ github.com/sirupsen/logrus v1.0.6 github.com/beorn7/perks 3a771d992973f24aa725d07868b467d1ddfceaf github.com/cloudflare/cfssl 1.3.2 github.com/dustin/go-humanize 8929fe90cee4b2cb9deb468b51fb34eba64d1bf0 -github.com/fernet/fernet-go 1b2437bc582b3cfbb341ee5a29f8ef5b42912ff2 +github.com/fernet/fernet-go 9eac43b88a5efb8651d24de9b68e87567e029736 github.com/google/certificate-transparency-go v1.0.20 github.com/hashicorp/go-immutable-radix 826af9ccf0feeee615d546d69b11f8e98da8c8f1 git://github.com/tonistiigi/go-immutable-radix.git github.com/hashicorp/go-memdb cb9a474f84cc5e41b273b20c6927680b2a8776ad diff --git a/vendor/github.com/fernet/fernet-go/fernet.go b/vendor/github.com/fernet/fernet-go/fernet.go index 8549e69c45..9e4bcce35c 100644 --- a/vendor/github.com/fernet/fernet-go/fernet.go +++ b/vendor/github.com/fernet/fernet-go/fernet.go @@ -67,7 +67,7 @@ func verify(msg, tok []byte, ttl time.Duration, now time.Time, k *Key) []byte { return nil } ts := time.Unix(int64(binary.BigEndian.Uint64(tok[1:])), 0) - if ttl >= 0 && (now.After(ts.Add(ttl)) || ts.After(now.Add(maxClockSkew))) { + if ttl > 0 && (now.After(ts.Add(ttl)) || ts.After(now.Add(maxClockSkew))) { return nil } n := len(tok) - sha256.Size