[KNOX-2316] Knox Token State Eviction Must Consider Maximum Token Lifetime

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Component/s: Server
• Assignee: Philip Zampino
• Reporter: Philip Zampino
• Created: 06/Apr/20 14:32
• Updated: 07/Apr/20 13:05
• Resolved: 07/Apr/20 13:05

Description

The evaluation for determining when to evict Knox token state, when server-managed state is enabled, is based on the token's expiration without consideration for the maximum token lifetime.

This evaluation should be based on the maximum token lifetime to avoid the premature eviction of token state due to irregular renewers which may not request renewal prior to expiration.

Issue Links

• links to: GitHub Pull Request #306