Claim 'nbf' is mandatory only for SCITOKENS

Petr Vokac · Petr Vokac · commit af6d34a09862 · 2023-03-03T08:05:44.000+01:00
diff --git a/src/scitokens_internal.h b/src/scitokens_internal.h
@@ -448,7 +448,7 @@ class Validator {
         if (!jwt.has_payload_claim("iat")) {
             throw JWTVerificationException("'iat' claim is mandatory");
         }
-        if (m_profile != SciToken::Profile::AT_JWT) {
+        if (m_profile == SciToken::Profile::SCITOKENS_1_0 || m_profile == SciToken::Profile::SCITOKENS_2_0) {
             if (!jwt.has_payload_claim("nbf")) {
                 throw JWTVerificationException("'nbf' claim is mandatory");
             }

Original file line number	Diff line number	Diff line change
`@@ -448,7 +448,7 @@ class Validator {`
`448`	`448`	`if (!jwt.has_payload_claim("iat")) {`
`449`	`449`	`throw JWTVerificationException("'iat' claim is mandatory");`
`450`	`450`	`}`
`451`		`- if (m_profile != SciToken::Profile::AT_JWT) {`
	`451`	`+ if (m_profile == SciToken::Profile::SCITOKENS_1_0 \|\| m_profile == SciToken::Profile::SCITOKENS_2_0) {`
`452`	`452`	`if (!jwt.has_payload_claim("nbf")) {`
`453`	`453`	`throw JWTVerificationException("'nbf' claim is mandatory");`
`454`	`454`	`}`