CHANGELOG.md

@@ -10,6 +10,7 @@ Changelog for FrostFS Node
 ### Fixed
 - Big object removal with non-local parts (#1978)
 - Disable pilorama when moving to degraded mode (#2197)
+- Correct status error for expired session token (#2207)
 
 ### Removed
 ### Updated

pkg/services/object/acl/v2/service.go

@@ -10,6 +10,7 @@ import (
 	"github.com/TrueCloudLab/frostfs-node/pkg/core/netmap"
 	"github.com/TrueCloudLab/frostfs-node/pkg/services/object"
 	"github.com/TrueCloudLab/frostfs-node/pkg/util/logger"
+	apistatus "github.com/TrueCloudLab/frostfs-sdk-go/client/status"
 	"github.com/TrueCloudLab/frostfs-sdk-go/container/acl"
 	cid "github.com/TrueCloudLab/frostfs-sdk-go/container/id"
 	oid "github.com/TrueCloudLab/frostfs-sdk-go/object/id"
@@ -573,6 +574,9 @@ func (b Service) findRequestInfo(req MetaWithToken, idCnr cid.ID, op acl.Op) (in
 		if err != nil {
 			return info, errors.New("can't fetch current epoch")
 		}
+		if req.token.ExpiredAt(currentEpoch) {
+			return info, apistatus.SessionTokenExpired{}
+		}
 		if req.token.InvalidAt(currentEpoch) {
 			return info, fmt.Errorf("%s: token is invalid at %d epoch)",
 				invalidRequestMessage, currentEpoch)