Index: server/auth/delegation/checker.go |
diff --git a/server/auth/delegation/checker.go b/server/auth/delegation/checker.go |
index 4b3b89cefd8105282b57488ca2b192c8ca3b9e2f..6e45b3a25a8ebdcc1ec34e0493d728d421952d05 100644 |
--- a/server/auth/delegation/checker.go |
+++ b/server/auth/delegation/checker.go |
@@ -15,6 +15,7 @@ import ( |
"github.com/luci/luci-go/common/clock" |
"github.com/luci/luci-go/common/errors" |
"github.com/luci/luci-go/common/logging" |
+ "github.com/luci/luci-go/common/retry/transient" |
"github.com/luci/luci-go/server/auth/identity" |
"github.com/luci/luci-go/server/auth/signing" |
@@ -95,7 +96,7 @@ func CheckToken(c context.Context, params CheckTokenParams) (identity.Identity, |
// Signed serialized subtoken -> Subtoken proto. |
subtoken, err := unsealToken(c, tok, params.CertificatesProvider) |
if err != nil { |
- if errors.IsTransient(err) { |
+ if transient.Tag.In(err) { |
logging.Warningf(c, "auth: Transient error when checking delegation token signature - %s", err) |
return "", err |
} |
@@ -178,7 +179,7 @@ func checkSubtoken(c context.Context, subtoken *messages.Subtoken, params *Check |
// Do the audience check (may use group lookups). |
if err := checkSubtokenAudience(c, subtoken, params.PeerID, params.GroupsChecker); err != nil { |
- if errors.IsTransient(err) { |
+ if transient.Tag.In(err) { |
logging.Warningf(c, "auth: Transient error when checking delegation token audience - %s", err) |
return "", err |
} |