mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-08-27 20:40:13 +03:00
joserfc.jwt.decode() does not validate the exp claim by default, so expired tokens were accepted indefinitely. Added explicit check after decoding. See issue #2781.