From b47dcf8e6b56ebfab72031d4c0d7fa973b728b66 Mon Sep 17 00:00:00 2001
From: Justin Richer <jricher@mitre.org>
Date: Fri, 17 Aug 2012 16:35:27 -0400
Subject: [PATCH] fixed timestamp math

(I hate timestamp math)
---
 .../openid/connect/client/AbstractOIDCAuthenticationFilter.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/openid-connect-client/src/main/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilter.java b/openid-connect-client/src/main/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilter.java
index 998b03916..8c2a22fe5 100644
--- a/openid-connect-client/src/main/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilter.java
+++ b/openid-connect-client/src/main/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilter.java
@@ -371,7 +371,7 @@ public class AbstractOIDCAuthenticationFilter extends
 			} else {
 				// it's not null, see if it's expired
 				Date now = new Date();
-				if (!now.after(idClaims.getExpiration())) {
+				if (now.after(idClaims.getExpiration())) {
 					throw new AuthenticationServiceException("Id Token is expired: " + idClaims.getExpiration());
 				}
 			}