(security) fix user's JWT

fixes #15 replaces #21
reddec · Jan 1, 2023 · f65a28e · f65a28e · Ljkingoftires · Mar 23, 2023
1 parent dd75f57
commit f65a28e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/api/services/user_srv.go b/api/services/user_srv.go
@@ -72,9 +72,10 @@ func (srv *userSrv) Login(ctx context.Context, login, password string) (*api.Tok
 	if err != nil {
 		return nil, err
 	}
-
+	now := time.Now()
 	tok := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
-		"iat":  time.Now().Add(srv.config.LifeTime),
+		"iat":  now.Unix(),
+		"exp":  now.Add(srv.config.LifeTime).Unix(),
 		"user": login,
 	})
 	v, err := tok.SignedString([]byte(srv.secret))