mirror of
https://github.com/danbulant/jose
synced 2026-05-24 20:41:46 +00:00
validating that iat is in the past is common sense but actually nowhere defined, in most applications tokens will contain `exp` and for those it seems requiring a few second leeway just to satisfy `iat` seems inappropriate |
||
|---|---|---|
| .. | ||
| decode.test.js | ||
| sign.test.js | ||
| verify.test.js | ||