Skip cert offset check
// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.athenz.zpe;
+import com.yahoo.athenz.auth.token.AccessToken;
import com.yahoo.athenz.zpe.AuthZpeClient;
import com.yahoo.vespa.athenz.api.AthenzAccessToken;
import com.yahoo.vespa.athenz.api.AthenzResourceName;
@@ -20,6 +21,8 @@ public class DefaultZpe implements Zpe {
public DefaultZpe() {
AuthZpeClient.init();
+ // Disable access token cert offset validation to allow existing tokens with refreshed certs
+ AccessToken.setAccessTokenCertOffset(-1);
}
@Override
