fix: set JWT canOnlyBeUsedAfter to now instead of +1 minute from now (#…

…28) Update JWT canOnlyBeUsedAfter to now instead of +1 minute from now.
gr4vy · Jun 14, 2024 · 8201ca3 · 8201ca3
1 parent 0cef7df
commit 8201ca3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/composer.lock b/composer.lock
diff --git a/lib/Gr4vyConfig.php b/lib/Gr4vyConfig.php
@@ -125,7 +125,7 @@ public static function getToken($private_key, $scopes = array(), $embed = array(
                 // Configures the time that the token was issue (iat claim)
                 ->issuedAt($now)
                 // Configures the time that the token can be used (nbf claim)
-                ->canOnlyBeUsedAfter($now->modify('+1 minute'))
+                ->canOnlyBeUsedAfter($now)#->modify('+1 minute'))
                 // Configures the expiration time of the token (exp claim)
                 ->expiresAt($now->modify('+1 hour'))
                 // Configures a new claim, called "uid"