Add token expiry checks and bump version to 0.0.7 · JavaScriptSolidServer/solid-oidc@a7bae60 · GitHub

JavaScriptSolidServer / solid-oidc Public

• Notifications You must be signed in to change notification settings
• Fork 1
• Star 3

• Code
• Issues 3
• Pull requests
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Commit a7bae60

Browse filesBrowse the repository at this point in the historyBrowse files

melvincarvalho

committed

Add token expiry checks and bump version to 0.0.7

- Validate exp/nbf claims with 60s clock skew tolerance - Bump version to 0.0.7

1 parent 2dc4c22 commit a7bae60
Copy full SHA for a7bae60

2 files changed

+11-1Lines changed: 11 additions & 1 deletion

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• package.json
• solid-oidc.js

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎package.json‎

Copy file name to clipboardExpand all lines: package.json

+1-1Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "solid-oidc",
3		- "version": "0.0.6",
	3	+ "version": "0.0.7",
4	4	"description": "Minimal, zero-build, zero-dependency Solid-OIDC client for browsers",
5	5	"type": "module",
6	6	"main": "solid-oidc.js",

Collapse file

‎solid-oidc.js‎

Copy file name to clipboardExpand all lines: solid-oidc.js

+10Lines changed: 10 additions & 0 deletions

Original file line number	Diff line number	Diff line change
@@ -98,6 +98,16 @@ async function verifyJWT(token, jwksUri, options = {}) {
98	98	if (!aud.includes(options.audience)) throw new Error('Audience mismatch')
99	99	}
100	100
	101	+ // Time-based claims (exp, nbf) with 60s clock skew tolerance
	102	+ const now = Math.floor(Date.now() / 1000)
	103	+ const skew = 60
	104	+ if (typeof payload.exp === 'number' && now - skew > payload.exp) {
	105	+ throw new Error('Token expired')
	106	+ }
	107	+ if (typeof payload.nbf === 'number' && now + skew < payload.nbf) {
	108	+ throw new Error('Token not yet valid')
	109	+ }
	110	+
101	111	// Fetch JWKS and find matching key
102	112	const response = await fetch(jwksUri)
103	113	if (!response.ok) throw new Error(`JWKS fetch failed: ${response.status}`)

0 commit comments

Comments

0 (0)