Add safe addition in decoder.rs

eclipse · Mar 6, 2024 · b55e778 · b55e778
1 parent 4077045
commit b55e778
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/kuksa_databroker/databroker/src/authorization/jwt/decoder.rs b/kuksa_databroker/databroker/src/authorization/jwt/decoder.rs
@@ -130,8 +130,13 @@ impl TryFrom<Claims> for Permissions {
             }
         }
 
-        permissions = permissions
-            .expires_at(std::time::UNIX_EPOCH + std::time::Duration::from_secs(claims.exp));
+        if let Some(expire_date) =
+            std::time::UNIX_EPOCH.checked_add(std::time::Duration::from_secs(claims.exp))
+        {
+            permissions = permissions.expires_at(expire_date);
+        } else {
+            return Err(Error::ClaimsError);
+        }
 
         permissions.build().map_err(|err| match err {
             PermissionsBuildError::BuildError => Error::ClaimsError,