From d480e4c2f897f7fdfdb73b193b3e21417baf4ead Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Wed, 22 Jul 2015 12:17:01 +0200
Subject: fix problem with STORK respone IssueInstant and time synchronization
 jitter

---
 .../peps/auth/engine/core/validator/CustomAttributeQueryValidator.java  | 2 +-
 .../auth/engine/core/validator/MultipleAssertionResponseValidator.java  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/CustomAttributeQueryValidator.java b/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/CustomAttributeQueryValidator.java
index c602ad38a..4fce4df3f 100644
--- a/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/CustomAttributeQueryValidator.java
+++ b/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/CustomAttributeQueryValidator.java
@@ -62,7 +62,7 @@ public class CustomAttributeQueryValidator implements Validator<CustomAttributeQ
 	 * @throws ValidationException the validation exception
 	 */
 	protected void validateTime(CustomAttributeQuery query) throws ValidationException {
-        if (query.getIssueInstant().isAfterNow())
+        if (query.getIssueInstant().minusMinutes(5).isAfterNow())
             throw new ValidationException("Issue time is in the futue");
     }
 
diff --git a/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/MultipleAssertionResponseValidator.java b/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/MultipleAssertionResponseValidator.java
index 72639c8ee..7e1242a88 100644
--- a/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/MultipleAssertionResponseValidator.java
+++ b/id/server/stork2-saml-engine/src/main/java/eu/stork/peps/auth/engine/core/validator/MultipleAssertionResponseValidator.java
@@ -63,7 +63,7 @@ public class MultipleAssertionResponseValidator implements Validator<Response> {
 	 * @throws ValidationException the validation exception
 	 */
 	protected void validateTime(Response response) throws ValidationException {		
-        if (response.getIssueInstant().isAfterNow())
+        if (response.getIssueInstant().minusMinutes(5).isAfterNow())
             throw new ValidationException("Issue time is in the futue");
     }
 	
-- 
cgit v1.2.3