jwt icon indicating copy to clipboard operation
jwt copied to clipboard

Not before claim is not verified on OpenSSL encrypted tokens

Open mediamonks-robert opened this issue 10 years ago • 1 comments

When my notBefore claim is set in the future the openssl encrypted token does not verify this. When using the signature option an DecodeException is thrown.

Scenario: I use notBefore() and try to decrypt the token before Expected result: A DecodeException is thrown Actual result: token is valid

mediamonks-robert avatar Jul 08 '15 07:07 mediamonks-robert

Hmm, interesting - thanks for reporting! I'll take a look at it.

enygma avatar Jul 08 '15 12:07 enygma