[DIRKRB-585] Allow for optional expiry + NotBefore claims when processing a JWT token

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0-RC2
• Fix Version/s: 1.0.0
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 15/Jun/16 16:09
• Updated: 15/May/17 08:33
• Resolved: 15/Jun/16 16:09

Description

Currently, we insist that a JWT token should have a expiry and NotBefore claims. This should be relaxed so that validation only fails if these claims exist and are not valid.