Merge pull request apereo#89 from antsar/master

Fixed redirect loop with CASTimeout=0
criecm · Oct 11, 2016 · c796a6b · c796a6b
2 parents bbe8860 + 6f8cc2f
commit c796a6b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/mod_auth_cas.c b/src/mod_auth_cas.c
@@ -1678,7 +1678,9 @@ apr_byte_t isValidCASCookie(request_rec *r, cas_cfg *c, char *cookie, char **use
 		return FALSE;
 	}
 
-	if(cache.issued < (apr_time_now()-(c->CASTimeout*((apr_time_t) APR_USEC_PER_SEC))) || cache.lastactive < (apr_time_now()-(c->CASIdleTimeout*((apr_time_t) APR_USEC_PER_SEC)))) {
+    if((c->CASTimeout > 0 &&
+       (cache.issued < (apr_time_now()-(c->CASTimeout*((apr_time_t) APR_USEC_PER_SEC))))) ||
+       cache.lastactive < (apr_time_now()-(c->CASIdleTimeout*((apr_time_t) APR_USEC_PER_SEC)))) {
 		/* delete this file since it is no longer valid */
 		deleteCASCacheFile(r, cookie);
 		if(c->CASDebug)