Merge pull request #112 from vokac/only-scitoken-mandatory-nbf

djw8605 · web-flow · commit 6ed4cc13f8c7 · 2023-03-09T11:16:45.000-06:00
Claim 'nbf' is mandatory only for SCITOKENS
diff --git a/src/scitokens_internal.h b/src/scitokens_internal.h
@@ -448,7 +448,8 @@ class Validator {
         if (!jwt.has_payload_claim("iat")) {
             throw JWTVerificationException("'iat' claim is mandatory");
         }
-        if (m_profile != SciToken::Profile::AT_JWT) {
+        if (m_profile == SciToken::Profile::SCITOKENS_1_0 ||
+            m_profile == SciToken::Profile::SCITOKENS_2_0) {
             if (!jwt.has_payload_claim("nbf")) {
                 throw JWTVerificationException("'nbf' claim is mandatory");
             }

Original file line number	Diff line number	Diff line change
`@@ -448,7 +448,8 @@ class Validator {`
`448`	`448`	`if (!jwt.has_payload_claim("iat")) {`
`449`	`449`	`throw JWTVerificationException("'iat' claim is mandatory");`
`450`	`450`	`}`
`451`		`- if (m_profile != SciToken::Profile::AT_JWT) {`
	`451`	`+ if (m_profile == SciToken::Profile::SCITOKENS_1_0 \|\|`
	`452`	`+ m_profile == SciToken::Profile::SCITOKENS_2_0) {`
`452`	`453`	`if (!jwt.has_payload_claim("nbf")) {`
`453`	`454`	`throw JWTVerificationException("'nbf' claim is mandatory");`
`454`	`455`	`}`