Use TimeProvider in ValidateLifetime

AzureAD · Aug 7, 2024 · c7265b9 · c7265b9
1 parent 20bcf69
commit c7265b9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Microsoft.IdentityModel.Tokens/ValidatorUtilities.cs b/src/Microsoft.IdentityModel.Tokens/ValidatorUtilities.cs
@@ -36,7 +36,11 @@ internal static void ValidateLifetime(DateTime? notBefore, DateTime? expires, Se
                     Expires = expires
                 });
 
+#if SUPPORTS_TIME_PROVIDER
+            DateTime utcNow = validationParameters.TimeProvider?.GetUtcNow().UtcDateTime ?? DateTime.UtcNow;
+#else
             DateTime utcNow = DateTime.UtcNow;
+#endif
             if (notBefore.HasValue && (notBefore.Value > DateTimeUtil.Add(utcNow, validationParameters.ClockSkew)))
                 throw LogHelper.LogExceptionMessage(new SecurityTokenNotYetValidException(LogHelper.FormatInvariant(LogMessages.IDX10222, LogHelper.MarkAsNonPII(notBefore.Value), LogHelper.MarkAsNonPII(utcNow)))
                 {