SasanLabs / owasp-zap-jwt-addon

OWASP ZAP addon for finding vulnerabilities in JWT Implementations
https://www.zaproxy.org/
Apache License 2.0
30 stars 12 forks source link

[Analysis] Adding a rule which checks the difference between current time and token's expiry time and raise an alert if difference is more than X minutes #16

Open preetkaran20 opened 4 years ago

preetkaran20 commented 4 years ago

Is your feature request related to a problem? Please describe. As JWT's should not be very long lived because of revocation issue hence an alert of low priority can be raised if such a case is found. Need to analyse more on this and check if any other such validations are needed.