In the token exchange, assert expires_in?

ncsa / oa4mp

Open Authorization for MyProxy

https://oa4mp.org/

Other

8 stars 10 forks source link

In the token exchange, assert expires_in? #178

Closed jjg-123 closed 5 months ago

jjg-123 commented 8 months ago

As per https://www.rfc-editor.org/rfc/rfc8693 it is recommended that expires_in for the returned token be asserted. We don't do this now since the returned token is a JWT. We should possibly assert it in the future? Apparently some libraries expect it.