diff --git a/pic-sure-auth-services/src/main/java/edu/harvard/hms/dbmi/avillach/auth/service/impl/TokenService.java b/pic-sure-auth-services/src/main/java/edu/harvard/hms/dbmi/avillach/auth/service/impl/TokenService.java index 6081125e..09683304 100644 --- a/pic-sure-auth-services/src/main/java/edu/harvard/hms/dbmi/avillach/auth/service/impl/TokenService.java +++ b/pic-sure-auth-services/src/main/java/edu/harvard/hms/dbmi/avillach/auth/service/impl/TokenService.java @@ -183,7 +183,10 @@ private TokenInspection validateToken(Map inputMap) throws Illeg errorMsg = "User doesn't have enough privileges."; } - if (isAuthorizationPassed) { + if (isLongTermToken) { + // The long term token is not automatically refreshed, so we don't need to check the expiration time + tokenInspection.addField("active", true); + } else if (isAuthorizationPassed) { tokenInspection.addField("active", true); ArrayList roles = new ArrayList<>(); for (Privilege p : user.getTotalPrivilege()) {