JWT Token expired ook skew meeloggen
svn path=/Website/branches/v2016.3/; revision=32573
This commit is contained in:
@@ -1005,13 +1005,15 @@ function jwt_verify(decoded_jwt, secret, skew, duration)
|
||||
|
||||
// Onze eigen duration/expiration controleren we ook nog
|
||||
if (claim.payload.iat + duration < now - skew) {
|
||||
__DoLog("Token expired. Now is {0}, got {1}".format(toDateTimeString(new Date(now * 1000), true),
|
||||
toDateTimeString(new Date(claim.payload.iat * 1000), true)));
|
||||
__DoLog("Token expired. Now is {0}, got {1}, skew {2}".format(toDateTimeString(new Date(now * 1000), true),
|
||||
toDateTimeString(new Date(claim.payload.iat * 1000), true),
|
||||
skew));
|
||||
return { err: 'Token expired' };
|
||||
}
|
||||
if (claim.payload.iat > now + skew) {
|
||||
__DoLog("Token not yet active. Now is {0}, got {1}".format(toDateTimeString(new Date(now * 1000), true),
|
||||
toDateTimeString(new Date(claim.payload.iat * 1000), true)));
|
||||
__DoLog("Token not yet active. Now is {0}, got {1}, skew {2}".format(toDateTimeString(new Date(now * 1000), true),
|
||||
toDateTimeString(new Date(claim.payload.iat * 1000), true),
|
||||
skew));
|
||||
return { err: 'Token not yet active' };
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user