[SYNCOPE-1620] JWT validation requires exp and nbf claims

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.16, 2.1.8
• Fix Version/s: 2.0.17, 2.1.9, 3.0.0-M0
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 04/Mar/21 07:56
• Updated: 07/Apr/21 06:29
• Resolved: 04/Mar/21 09:02

Description

As specified by RFC 7519, exp and nbf claims are OPTIONAL.

Currently, however, JWTAuthenticationProvider fails if such claims are not present.