You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> The nbf (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing. The processing of the nbf claim requires that the current date/time MUST be after or equal to the not-before date/time listed in the nbf claim. Implementers MAY provide for some small leeway, usually no more than a few minutes, to account for clock skew. Its value MUST be a number containing a NumericDate value. Use of this claim is OPTIONAL.
178
+
> The "nbf" (not before) claim identifies the time before which the JWT
179
+
> MUST NOT be accepted for processing. The processing of the "nbf"
180
+
> claim requires that the current date/time MUST be after or equal to
181
+
> the not-before date/time listed in the "nbf" claim. Implementers MAY
182
+
> provide for some small leeway, usually no more than a few minutes, to
183
+
> account for clock skew. Its value MUST be a number containing a
184
+
> NumericDate value. Use of this claim is OPTIONAL.
178
185
179
186
The `nbf` claim works similarly to the `exp` claim above.
> The iss (issuer) claim identifies the principal that issued the JWT. The processing of this claim is generally application specific. The iss value is a case-sensitive string containing a StringOrURI value. Use of this claim is OPTIONAL.
196
+
> The "iss" (issuer) claim identifies the principal that issued the
197
+
> JWT. The processing of this claim is generally application specific.
198
+
> The "iss" value is a case-sensitive string containing a StringOrURI
199
+
> value. Use of this claim is OPTIONAL.
190
200
191
201
```python
192
202
import jwt
@@ -206,7 +216,17 @@ If the issuer claim is incorrect, `jwt.InvalidIssuerError` will be raised.
206
216
207
217
### Audience Claim
208
218
209
-
> The aud (audience) claim identifies the recipients that the JWT is intended for. Each principal intended to process the JWT MUST identify itself with a value in the audience claim. If the principal processing the claim does not identify itself with a value in the aud claim when this claim is present, then the JWT MUST be rejected. In the general case, the aud value is an array of case-sensitive strings, each containing a StringOrURI value. In the special case when the JWT has one audience, the aud value MAY be a single case-sensitive string containing a StringOrURI value. The interpretation of audience values is generally application specific. Use of this claim is OPTIONAL.
219
+
> The "aud" (audience) claim identifies the recipients that the JWT is
220
+
> intended for. Each principal intended to process the JWT MUST
221
+
> identify itself with a value in the audience claim. If the principal
222
+
> processing the claim does not identify itself with a value in the
223
+
> "aud" claim when this claim is present, then the JWT MUST be
224
+
> rejected. In the general case, the "aud" value is an array of case-
225
+
> sensitive strings, each containing a StringOrURI value. In the
226
+
> special case when the JWT has one audience, the "aud" value MAY be a
227
+
> single case-sensitive string containing a StringOrURI value. The
228
+
> interpretation of audience values is generally application specific.
0 commit comments