Comment 6 for bug 998185

Revision history for this message
Derek Higgins (derekh) wrote : Re: Once a token is created/distributed its expiry date can be circumvented

So is the best course of action here to maintain ability to re-auth with a tenant selection
but maintain the original expiry time.

Or should the code that allows token chaining be removed altogether?