mirror of
https://github.com/pgsty/minio.git
synced 2026-07-23 14:10:25 +03:00
lock/server: Check if the lock server itself is skewed back. (#3447)
This commit is contained in:
@@ -58,9 +58,11 @@ func (l *lockServer) removeEntry(name, uid string, lri *[]lockRequesterInfo) boo
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Validate lock args.
|
// Validate lock args.
|
||||||
|
// - validate time stamp.
|
||||||
|
// - validate jwt token.
|
||||||
func (l *lockServer) validateLockArgs(args *LockArgs) error {
|
func (l *lockServer) validateLockArgs(args *LockArgs) error {
|
||||||
curTime := time.Now().UTC()
|
curTime := time.Now().UTC()
|
||||||
if curTime.Sub(args.Timestamp) > globalMaxSkewTime {
|
if curTime.Sub(args.Timestamp) > globalMaxSkewTime || args.Timestamp.Sub(curTime) > globalMaxSkewTime {
|
||||||
return errServerTimeMismatch
|
return errServerTimeMismatch
|
||||||
}
|
}
|
||||||
if !isRPCTokenValid(args.Token) {
|
if !isRPCTokenValid(args.Token) {
|
||||||
|
|||||||
Reference in New Issue
Block a user