From 1f618c8f4113d1218875d4f1d86e28e4a637b51a Mon Sep 17 00:00:00 2001
From: Javier Prieto <jprietove@gmail.com>
Date: Wed, 27 Jan 2021 16:50:19 +0100
Subject: [PATCH] Added JWT nbf, not before

---
 websockify/token_plugins.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/websockify/token_plugins.py b/websockify/token_plugins.py
index 80a9568..dab1982 100644
--- a/websockify/token_plugins.py
+++ b/websockify/token_plugins.py
@@ -129,6 +129,12 @@ class JWTTokenApi(BasePlugin):
 
                 parsed = json.loads(token.claims)
                 
+                if 'nbf' in parsed:
+                    # Not Before is present, so we need to check it
+                    if time.time() < parsed['nbf']:
+                        print('Token can not be used yet!', file=sys.stderr)
+                        return None
+
                 if 'exp' in parsed:
                     # Expiration time is present, so we need to check it
                     if time.time() > parsed['exp']: