Index: lams_common/src/java/org/lamsfoundation/lams/integration/security/Authenticator.java =================================================================== diff -u -rd9562e031bdfad9636e7ba4d47ae3b4417cd22f7 -r66d8c0867b8f221842d7c09b755ee205bb121b33 --- lams_common/src/java/org/lamsfoundation/lams/integration/security/Authenticator.java (.../Authenticator.java) (revision d9562e031bdfad9636e7ba4d47ae3b4417cd22f7) +++ lams_common/src/java/org/lamsfoundation/lams/integration/security/Authenticator.java (.../Authenticator.java) (revision 66d8c0867b8f221842d7c09b755ee205bb121b33) @@ -98,8 +98,9 @@ int timeToLiveLoginRequest = map.getTimeToLiveLoginRequest(); // sum up request time and maximum allowed request's time to live Date requestTimePlusTimeToLive = new Date(datetimeParam + timeToLiveLoginRequest * 60 * 1000); + Date requestTimeMinusTimeToLive = new Date(datetimeParam - timeToLiveLoginRequest * 60 * 1000); Date now = new Date(); - if (requestTimePlusTimeToLive.before(now)) { + if (requestTimePlusTimeToLive.before(now) || requestTimeMinusTimeToLive.after(now)) { throw new AuthenticationException("Login Request can't be older than " + timeToLiveLoginRequest + " minutes. Please, refresh your previous page and try again."); }