Skip to content

fix: reject expired assertion boundary - #15

Merged
nkavian merged 1 commit into
aep-foundation:mainfrom
nkavian:fix/assertion-expiration-boundary
Sep 3, 2026
Merged

fix: reject expired assertion boundary#15
nkavian merged 1 commit into
aep-foundation:mainfrom
nkavian:fix/assertion-expiration-boundary

Conversation

@nkavian

@nkavian nkavian commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Summary

  • reject client assertions at the exact expiration-plus-skew boundary
  • cover the Service boundary when a custom verifier returns expired claims

Verification

  • ./mvnw verify
  • ./scripts/verify-consumer.sh

@nkavian
nkavian merged commit b59a3bd into aep-foundation:main Sep 3, 2026
4 checks passed
@nkavian
nkavian deleted the fix/assertion-expiration-boundary branch September 3, 2026 01:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant