commit 08be74de678930e6823f9fe7e460c35bb58040f9
author Vitaly Buka <vitalybuka@google.com> Tue Feb 02 15:25:09 2016 -0800
committer Vitaly Buka <vitalybuka@google.com> Thu Feb 04 00:28:37 2016 +0000
tree 0be4471413d73a9463b3cd70212f85a0855faa08
parent 4efdf4637d19d6fd6c1725820fd07a5702e71a56

Update libuweave/macaroon code

Added delegation time stamp into access token to match changed
validation logic of macaroons.

BUG: 26728665
Change-Id: I131b92b0e0b1b2274d80bdc0b5790a8c05071ec5
Reviewed-on: https://weave-review.googlesource.com/2467
Reviewed-by: Vitaly Buka <vitalybuka@google.com>

third_party/libuweave/src/macaroon_caveat.h

diff --git a/third_party/libuweave/src/macaroon_caveat.h b/third_party/libuweave/src/macaroon_caveat.h
index 33f9d24..4905667 100644
--- a/third_party/libuweave/src/macaroon_caveat.h
+++ b/third_party/libuweave/src/macaroon_caveat.h
@@ -40,6 +40,9 @@
   kUwMacaroonCaveatScopeTypeViewer = 20,
 } UwMacaroonCaveatScopeType;
 
+// For security sanity checks
+#define UW_MACAROON_CAVEAT_SCOPE_LOWEST_POSSIBLE 127
+
 /** Compute the buffer sizes that are enough for caveat creation functions. */
 size_t uw_macaroon_caveat_creation_get_buffsize_(UwMacaroonCaveatType type,
                                                  size_t str_len);