You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2021/03/04 07:57:00 UTC

[jira] [Created] (SYNCOPE-1620) JWT validation requires exp and nbf claims

Francesco Chicchiriccò created SYNCOPE-1620:
-----------------------------------------------

             Summary: JWT validation requires exp and nbf claims
                 Key: SYNCOPE-1620
                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1620
             Project: Syncope
          Issue Type: Bug
          Components: core
    Affects Versions: 2.1.8, 2.0.16
            Reporter: Francesco Chicchiriccò
            Assignee: Francesco Chicchiriccò
             Fix For: 2.0.17, 2.1.9, 3.0.0


As specified by [RFC 7519|https://tools.ietf.org/html/rfc7519], {{exp}} and {{nbf}} claims are OPTIONAL.

Currently, however, {{JWTAuthenticationProvider}} fails if such claims are not present.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)