From 5bffa4b7f936a3af5a25d3dd8b785c5f0fededb2 Mon Sep 17 00:00:00 2001
From: Kerollmops <clement@meilisearch.com>
Date: Thu, 17 Mar 2022 17:49:24 +0100
Subject: [PATCH] Tenant token validation is now created by a function

---
 meilisearch-http/src/extractors/authentication/mod.rs | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/meilisearch-http/src/extractors/authentication/mod.rs b/meilisearch-http/src/extractors/authentication/mod.rs
index 43949144b..c9c35b748 100644
--- a/meilisearch-http/src/extractors/authentication/mod.rs
+++ b/meilisearch-http/src/extractors/authentication/mod.rs
@@ -132,7 +132,6 @@ pub trait Policy {
 
 pub mod policies {
     use jsonwebtoken::{decode, Algorithm, DecodingKey, Validation};
-    use once_cell::sync::Lazy;
     use serde::{Deserialize, Serialize};
     use time::OffsetDateTime;
 
@@ -141,13 +140,13 @@ pub mod policies {
     // reexport actions in policies in order to be used in routes configuration.
     pub use meilisearch_auth::actions;
 
-    pub static TENANT_TOKEN_VALIDATION: Lazy<Validation> = Lazy::new(|| {
+    fn tenant_token_validation() -> Validation {
         let mut validation = Validation::default();
         validation.validate_exp = false;
         validation.required_spec_claims.remove("exp");
         validation.algorithms = vec![Algorithm::HS256, Algorithm::HS384, Algorithm::HS512];
         validation
-    });
+    }
 
     pub struct MasterPolicy;
 
@@ -206,7 +205,7 @@ pub mod policies {
                 return None;
             }
 
-            let mut validation = TENANT_TOKEN_VALIDATION.clone();
+            let mut validation = tenant_token_validation();
             validation.insecure_disable_signature_validation();
             let dummy_key = DecodingKey::from_secret(b"secret");
             let token_data = decode::<Claims>(token, &dummy_key, &validation).ok()?;
@@ -242,7 +241,7 @@ pub mod policies {
                 decode::<Claims>(
                     token,
                     &DecodingKey::from_secret(key.as_bytes()),
-                    &TENANT_TOKEN_VALIDATION,
+                    &tenant_token_validation(),
                 )
                 .ok()?;