Update AndroidSafetyNetAttestationVerifier.java (#52)

nic · web-flow · commit c9b3338f94fc · 2024-11-04T09:44:37.000+09:00
diff --git a/fido2-core/src/main/java/com/linecorp/line/auth/fido/fido2/server/attestation/android/safetynet/AndroidSafetyNetAttestationVerifier.java b/fido2-core/src/main/java/com/linecorp/line/auth/fido/fido2/server/attestation/android/safetynet/AndroidSafetyNetAttestationVerifier.java
@@ -178,7 +178,7 @@ public AttestationVerificationResult verify(AttestationStatement attestationStat
                 if (attestationStatementInfo.getTimestampMs() >= currentTime) {
                     throw new FIDO2ServerRuntimeException(InternalErrorCode.ANDROID_SAFETYNET_ATTESTATION_TIMESTAMP_INVALID);
                 }
-                if ((currentTime - attestationStatementInfo.getTimestampMs()) > 60 * 100) {
+                if ((currentTime - attestationStatementInfo.getTimestampMs()) > 60 * 1000) {
                     throw new FIDO2ServerRuntimeException(InternalErrorCode.ANDROID_SAFETYNET_ATTESTATION_TIMESTAMP_INVALID);
                 }
 

Original file line number	Diff line number	Diff line change
`@@ -178,7 +178,7 @@ public AttestationVerificationResult verify(AttestationStatement attestationStat`
`178`	`178`	`if (attestationStatementInfo.getTimestampMs() >= currentTime) {`
`179`	`179`	`throw new FIDO2ServerRuntimeException(InternalErrorCode.ANDROID_SAFETYNET_ATTESTATION_TIMESTAMP_INVALID);`
`180`	`180`	`}`
`181`		`- if ((currentTime - attestationStatementInfo.getTimestampMs()) > 60 * 100) {`
	`181`	`+ if ((currentTime - attestationStatementInfo.getTimestampMs()) > 60 * 1000) {`
`182`	`182`	`throw new FIDO2ServerRuntimeException(InternalErrorCode.ANDROID_SAFETYNET_ATTESTATION_TIMESTAMP_INVALID);`
`183`	`183`	`}`
`184`	`184`