[KNOX-2542] Token-based providers should check expiration before verifying tokens

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.6.0
• Component/s: Server
• Assignee: Philip Zampino
• Reporter: Philip Zampino
• Created: 10/Mar/21 20:28
• Updated: 11/Mar/21 21:21
• Resolved: 11/Mar/21 21:20

Description

Currently, the (expensive) token verification is done before any other token validation. As performance optimization, it should rather delay the verification until after the issuer and expiration have been evaluated. 

Issue Links

• links to: GitHub Pull Request #409