YueGuobin 8e9afbcf92
fix: Validate JWT token exp claim — was silently ignored after migration to joserfc
joserfc.jwt.decode() does not validate the exp claim by default,
so expired tokens were accepted indefinitely. Added explicit check
after decoding. See issue #2781.
2026-06-11 22:32:12 +08:00
..
2021-04-13 18:46:50 +09:30
2023-08-04 18:20:06 +10:00