iat test #78

Locked Unanswered

davedoesdev asked this question in Q&A

davedoesdev
Apr 17, 2020

Hi-
Nice project, I've switched over from jsjws.
I've got a question about https://github.com/panva/jose/blob/master/lib/jwt/verify.js#L270
What's the reasoning behind only checking iat is in the past if there's no exp claim?

Replies: 1 comment

panva
Apr 18, 2020
Maintainer

Hi @davedoesdev, see 0ed5025

0 replies

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment