private synchronized int getActiveToken()

in src/main/java/org/apache/sling/auth/form/impl/TokenStore.java [267:287]

• 18 lines of code
• 4 McCabe index (conditional complexity)

    private synchronized int getActiveToken() {
        if (System.currentTimeMillis() > nextUpdate
            || currentTokens.get(currentToken) == null) {
            // cycle so that during a typical ttl the tokens get completely
            // refreshed.
            nextUpdate = System.currentTimeMillis() + ttl
                / (currentTokens.length() - 1);
            byte[] b = new byte[20];
            random.nextBytes(b);

            SecretKey newToken = new SecretKeySpec(b, HMAC_SHA256);
            int nextToken = currentToken + 1;
            if (nextToken == currentTokens.length()) {
                nextToken = 0;
            }
            currentTokens.set(nextToken, newToken);
            currentToken = nextToken;
            saveTokens();
        }
        return currentToken;
    }