Summary
The token expiry validator computes the expected expiry as iat + ttlSeconds and rejects tokens where exp does not match. Unit tests should confirm the validator accepts tokens with a matching expiry and rejects those where exp has been tampered with.
Scope
- Test a token where
exp === iat + ttl passes validation
- Test a token where
exp > iat + ttl fails with token_expiry_tampered
- Test a token where
exp < iat + ttl fails with token_expiry_tampered
- Test a token with no
iat claim fails with missing_iat
Acceptance Criteria
ETA: 12 hours
Coordinate on Telegram
Summary
The token expiry validator computes the expected expiry as
iat + ttlSecondsand rejects tokens whereexpdoes not match. Unit tests should confirm the validator accepts tokens with a matching expiry and rejects those whereexphas been tampered with.Scope
exp === iat + ttlpasses validationexp > iat + ttlfails withtoken_expiry_tamperedexp < iat + ttlfails withtoken_expiry_tamperediatclaim fails withmissing_iatAcceptance Criteria
exppasses validationexpfails withtoken_expiry_tamperedexpfails withtoken_expiry_tamperediatfails withmissing_iatETA: 12 hours
Coordinate on Telegram