Remove exp-claim requirement for JWTIdentifierClaimsValidator
Basics
Logistics
Basics
Logistics
Description
The JWTIdentifierClaimsValidator currently requires exp claim to exist in the JWT claims set. It’s solely needed for setting the expiration time for the storage record in the replay cache: that lifetime could also be set in the validator properties to remove this requirement.
Environment
None
Activity
Show:
Henri Mikkonen May 3, 2024 at 1:49 PM
Included replayCacheRecordLifetime -property to the validator, defaulting to null for compatibility.
If it has a value, it's used for the storage record if exp-claim is not included in the claims set.
The
JWTIdentifierClaimsValidatorcurrently requiresexpclaim to exist in the JWT claims set. It’s solely needed for setting the expiration time for the storage record in the replay cache: that lifetime could also be set in the validator properties to remove this requirement.