miladrahimi/php-jwt

Wrong condition

WalentinG opened this issue · 1 comments

WalentinG commented

Exp must be newer than now

php-jwt/src/Validator/DefaultValidator.php

Line 21 in 333b2db

$this->addRule(PublicClaimNames::EXPIRATION_TIME, new NewerThan(time()));

but your NewerThan has incorrect behavior

php-jwt/src/Validator/Rules/Required/GreaterThan.php

Line 32 in 333b2db

return $exists && $this->number > $value;

Result: time() > exp, must be exp > time()

miladrahimi commented

Thanks for your report.
The bug is fixed now, you can update the package with composer update.
https://github.com/miladrahimi/php-jwt/releases/tag/v1.1.4