Added JWT nbf, not before

2021-01-27 16:50:19 +01:00 · 2021-01-27 16:50:19 +01:00 · 1f618c8f41
parent e9367b03be
commit 1f618c8f41
1 changed files with 6 additions and 0 deletions
--- a/websockify/token_plugins.py
+++ b/websockify/token_plugins.py
@ -129,6 +129,12 @@ class JWTTokenApi(BasePlugin):

                parsed = json.loads(token.claims)
                
+                if 'nbf' in parsed:
+                    # Not Before is present, so we need to check it
+                    if time.time() < parsed['nbf']:
+                        print('Token can not be used yet!', file=sys.stderr)
+                        return None
+
                if 'exp' in parsed:
                    # Expiration time is present, so we need to check it
                    if time.time() > parsed['exp']: