The Token can't be used before xxxxx

[saiyujs]

hi

this is the token : eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJpc3N1ZXIiLCJleHAiOjE2MDkxNDA3MTQsImlhdCI6MTYwOTEzNzExNCwidXNlcm5hbWUiOiJhZG1pbiJ9.UBaAyr3AC0FDaiYY5dtgN_TbYin0s37iILSua9AELkU

error: com.auth0.jwt.exceptions.InvalidClaimException: The Token can't be used before Mon Dec 28 14:31:54 CST 2020.

token debug: {
"iss": "issuer",
"exp": 1609140714,
"iat": 1609137114,
"username": "admin"
}

expire time is 2020-12-28 15:31:54, why it say token can't be used before Mon Dec 28 14:31:54 CST 2020 ??? it looks use the iat?

version:
com.auth0
java-jwt
3.10.3

[lbalmaceda]

Yes, the "issue at" (iat) claim is checked when you verify a token. See https://github.com/auth0/java-jwt#time-validation. If you need to disable that specific check, you can do so using the following method.

[amjadali-dev]

You can also use the inbuild method ignoreIssuedAT().
Java example
JWTVerifier jwtVerifier = JWT.require(algorithm).ignoreIssuedAt().build();

[vergenzt]

FYI I've submitted an errata request to RFC 7519 to update the spec to explicitly prohibit rejecting tokens with iat from "the future".

Feel free to follow along here: Discussion: JWT tokens containing iat values in the future should not be rejected