mirror of
https://github.com/danbulant/jose
synced 2026-05-24 12:35:36 +00:00
validating that iat is in the past is common sense but actually nowhere defined, in most applications tokens will contain `exp` and for those it seems requiring a few second leeway just to satisfy `iat` seems inappropriate |
||
|---|---|---|
| .. | ||
| decode.js | ||
| index.js | ||
| shared_validations.js | ||
| sign.js | ||
| verify.js | ||