svc: Return an error when the expiration, if defined, is in the past (#…

…277)
minio · Apr 23, 2024 · a687cbc · a687cbc
1 parent 10da385
commit a687cbc
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/user-commands.go b/user-commands.go
@@ -381,6 +381,9 @@ func (r *AddServiceAccountReq) Validate() error {
 	if err != nil {
 		return err
 	}
+	if r.Expiration != nil && r.Expiration.Before(time.Now()) {
+		return errors.New("the expiration time should be in the future")
+	}
 	return validateSADescription(r.Description)
 }
 
@@ -488,6 +491,10 @@ func (u *UpdateServiceAccountReq) Validate() error {
 	if err := validateSAName(u.NewName); err != nil {
 		return err
 	}
+
+	if u.NewExpiration != nil && u.NewExpiration.Before(time.Now()) {
+		return errors.New("the expiration time should be in the future")
+	}
 	return validateSADescription(u.NewDescription)
 }