Contents

# frozen_string_literal: true

module JWT
  module Claims
    # The NotBefore class is responsible for validating the 'nbf' (Not Before) claim in a JWT token.
    class NotBefore
      # Initializes a new NotBefore instance.
      #
      # @param leeway [Integer] the amount of leeway (in seconds) to allow when validating the 'nbf' claim. Defaults to 0.
      def initialize(leeway:)
        @leeway = leeway || 0
      end

      # Verifies the 'nbf' (Not Before) claim in the JWT token.
      #
      # @param context [Object] the context containing the JWT payload.
      # @param _args [Hash] additional arguments (not used).
      # @raise [JWT::ImmatureSignature] if the 'nbf' claim has not been reached.
      # @return [nil]
      def verify!(context:, **_args)
        return unless context.payload.is_a?(Hash)
        return unless context.payload.key?('nbf')

        raise JWT::ImmatureSignature, 'Signature nbf has not been reached' if context.payload['nbf'].to_i > (Time.now.to_i + leeway)
      end

      private

      attr_reader :leeway
    end
  end
end

Version data entries

3 entries across 3 versions & 2 rubygems

Version	Path
minato_ruby_api_client-0.2.2	vendor/bundle/ruby/3.2.0/gems/jwt-2.10.1/lib/jwt/claims/not_before.rb
jwt-2.10.1	lib/jwt/claims/not_before.rb
jwt-2.10.0	lib/jwt/claims/not_before.rb