8936: consider blobSigningTtl while generating and verifying signatures.

[arvados.git] / services / api / app / models / blob.rb

diff --git a/services/api/app/models/blob.rb b/services/api/app/models/blob.rb
index 34600d7a25a8c716bd9d1fd6ec49cea052dc0c58..91007fcc8aad42792a5fbff014965475940393c5 100644 (file)
--- a/services/api/app/models/blob.rb
+++ b/services/api/app/models/blob.rb
@@ -112,6 +112,7 @@ class Blob
     OpenSSL::HMAC.hexdigest('sha1', key,
                             [blob_hash,
                              api_token,
-                             timestamp].join('@'))
+                             timestamp,
+                             Rails.configuration.blob_signature_ttl].join('@'))
   end
 end