Skip to content

The leeway parameter is applies to all time based verifications #129

@tpickett66

Description

@tpickett66

Having expiration and not before timeouts using the same leeway is surprising and could lead JWTs to live longer than expected when both exp and nbf are being verified and a leeway is desired on one but not the other.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions