verify expires_time

iden3 · Nov 21, 2024 · 6c52a8d · 6c52a8d
1 parent fc4914a
commit 6c52a8d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/auth/auth.ts b/src/auth/auth.ts
@@ -208,6 +208,9 @@ export class Verifier {
   }
 
   public verifyAuthRequest(request: AuthorizationRequestMessage) {
+    if (request?.expires_time && request.expires_time < Math.floor(Date.now() / 1000)) {
+      throw new Error('Message expired');
+    }
     const groupIdValidationMap: { [k: string]: ZeroKnowledgeProofRequest[] } = {};
     const requestScope = request.body.scope;
     for (const proofRequest of requestScope) {
@@ -255,6 +258,9 @@ export class Verifier {
     request: AuthorizationRequestMessage,
     opts?: VerifyOpts
   ) {
+    if (response?.expires_time && response.expires_time < Math.floor(Date.now() / 1000)) {
+      throw new Error('Message expired');
+    }
     if ((request.body.message ?? '') !== (response.body.message ?? '')) {
       throw new Error('message for signing from request is not presented in response');
     }