}

	n, err := base64DecodeBytes(token[i+1:], *bufp)
	if err != nil {
		return err
	}
	borrow := signer.HashBorrower()
	hasher := hmac.New(borrow.Borrow, key)
	hasher.Write(token[:i])
	if !hmac.Equal((*bufp)[:n], hasher.Sum(nil)) {
		borrow.ReturnAll()
		return jwtgo.ErrSignatureInvalid
	}
	borrow.ReturnAll()

	if claims.AccessKey == "" && claims.Subject == "" {

		return
	}

	ctx = newContext(r, w, action)

	// Validate the authentication result here so that failures will be audit-logged.
	if apiErrCode != ErrNone {
		stsErr := apiToSTSError(apiErrCode)
		// Borrow the description error from the API error code
		writeSTSErrorResponse(ctx, w, stsErr, errors.New(errorCodes[apiErrCode].Description))
		return
	}

	if err := claims.populateSessionPolicy(r.Form); err != nil {

                                            value="<la:message key="labels.searchlog_configuration_button_back" />">
                                        <i class="fa fa-arrow-circle-left" aria-hidden="true"></i>
                                        <la:message key="labels.searchlog_configuration_button_back"/>
                                    </button>

                                            value="<la:message key="labels.crud_button_back" />">
                                        <i class="fa fa-arrow-circle-left" aria-hidden="true"></i>
                                        <la:message key="labels.crud_button_back"/>
                                    </button>
                                    <c:if test="${editable}">

                                        value="<la:message key="labels.joblog_button_back" />">
                                    <i class="fa fa-arrow-circle-left" aria-hidden="true"></i>
                                    <la:message key="labels.joblog_button_back"/>
                                </button>
                                <c:if test="${editable}">

                                            value="<la:message key="labels.crawling_info_button_back" />">
                                        <i class="fa fa-arrow-circle-left" aria-hidden="true"></i>
                                        <la:message key="labels.crawling_info_button_back"/>
                                    </button>

                                    <la:link href="/admin/searchlist/search?q=${f:u(q)}" styleClass="btn btn-default">
                                        <i class="fa fa-arrow-circle-left" aria-hidden="true"></i>
                                        <la:message key="labels.crud_button_back"/>
                                    </la:link>

                            <div class="card-footer">
                                <button type="submit" class="btn btn-default" name="list" value="back">
                                    <i class="fa fa-arrow-circle-left" aria-hidden="true"></i>
                                    <la:message key="labels.crud_button_back"/>
                                </button>
                                <c:if test="${editable}">

                                        name="reindexOnly"
                                        value="<la:message key="labels.reindex_start_button"/>">
                                    <i class="fa fa-arrow-circle-right" aria-hidden="true"></i>
                                    <la:message key="labels.reindex_start_button"/>
                                </button>
                            </div>

   * the given class. If the object being tested is {@code null} this predicate evaluates to {@code
   * false}.
   *
   * <p>If you want to filter an {@code Iterable} to narrow its type, consider using {@link
   * com.google.common.collect.Iterables#filter(Iterable, Class)} in preference.
   *
   * <p><b>Warning:</b> contrary to the typical assumptions about predicates (as documented at