tree 35f07feefb07d1b89b95cd878c3602a0355987cd
parent a9ea31e93c425ed41179ac48ec5ea43eae1b7107
author Matthew Maurer <mmaurer@google.com> 1556128397 -0700
committer Matthew Maurer <mmaurer@google.com> 1556756442 -0700

Don't check token for NO_AUTH_REQUIRED

IF NO_AUTH_REQUIRED or AUTH_TIMEOUT is specified, we don't need to check
the auth token. We began checking the auth token even in those cases
when the TRUSTED_CONFIRMATION_REQUIRED tag was introduced because the
TRUSTED_CONFIRMATION_REQUIRED tag must still be checked in those cases.

Bug: 129569848
Change-Id: I7b1fe55527f344759480330c2bb6f0a75ef15cfc