Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG]: JWT exp not calculated properly #16166

Closed
niden opened this issue Oct 17, 2022 · 1 comment · Fixed by #16165
Closed

[BUG]: JWT exp not calculated properly #16166

niden opened this issue Oct 17, 2022 · 1 comment · Fixed by #16165
Assignees
@niden
Labels
bug A bug report status: high High

Comments

@niden
Copy link
Member

niden commented Oct 17, 2022

The JWT exp claim is not properly calculated

RFC 7519, 4.1.4., The processing of the "exp" claim requires that the current date/time MUST be before the expiration date/time listed in the "exp" claim. So Validator must produce an error if current timestamp is grater than "exp" claim.
@niden niden added bug A bug report status: high High labels Oct 17, 2022
@niden niden added this to Phalcon v5 Oct 17, 2022
@niden niden moved this to Backlog in Phalcon v5 Oct 17, 2022
@niden niden moved this from Backlog to In Progress in Phalcon v5 Oct 17, 2022
@niden niden linked a pull request Oct 17, 2022 that will close this issue
Bugfix in JWT "exp" (Expiration Time) Claim validation. #16165
Merged
@niden niden mentioned this issue Oct 17, 2022
Merged
@niden
Copy link
Member Author

niden commented Oct 17, 2022

Resolved in #16165

@niden niden closed this as completed Oct 17, 2022
Repository owner moved this from In Progress to Implemented in Phalcon v5 Oct 17, 2022
@niden niden moved this from Implemented to Released in Phalcon v5 Oct 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@niden niden

Labels
bug A bug report status: high High
Projects
Phalcon v5
Archived in project
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Bugfix in JWT "exp" (Expiration Time) Claim validation. edgarsstrods/cphalcon
1 participant
@niden