Comment 8 for bug 1195924

Revision history for this message
Kieran Spear (kspear) wrote :

Current local time is used for the check when a token is first encountered and when it is pulled out of the cache. In both cases the token expiry value is in UTC.

The token expiry itself is always UTC. If I change the tz into the future on a devstack node, token expire time is cut short by auth_token middleware due to the tz offset. I found this when testing a short (1 hour) expiry time on tokens - tokens are considered expired by the auth_token middleware as soon as they're created in that case, because the local time is in the future.

Fix review is happening here:
https://review.openstack.org/#/c/35403/