Why does the parser pass 'false' as required to the VerifyNotBefore and VerifyIssuedAt? #431
Unanswered
DukeLuke94
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
If I configure the parser to validate the IssuedAt claim (with parserOptions: jwt.WithIssuedAt) and I provide a jwt token without an "iat" claim, the token is valid. Why? Because the parser passes false as required, as apposed to the other functions such as verifyAudience and verifyIssuer. What's the logic behind this?
`
`
Beta Was this translation helpful? Give feedback.
All reactions