auth_time date

auth0 · Oct 24, 2019 · 1eb123a · 1eb123a
1 parent a31d462
commit 1eb123a
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/src/jwt.ts b/src/jwt.ts
@@ -157,13 +157,15 @@ export const verify = (options: JWTVerifyOptions) => {
     );
   }
 
+  const leeway = options.leeway || 60;
   const now = new Date();
   const expDate = new Date(0);
   const iatDate = new Date(0);
   const nbfDate = new Date(0);
-  const leeway = options.leeway || 60;
-  const authTimeDate = new Date(
-    parseInt(decoded.claims.auth_time) + parseInt(options.max_age) + leeway
+  const authTimeDate = new Date(0);
+  authTimeDate.setUTCSeconds(
+    (parseInt(decoded.claims.auth_time) + parseInt(options.max_age)) / 1000 +
+      leeway
   );
   expDate.setUTCSeconds(decoded.claims.exp + leeway);
   iatDate.setUTCSeconds(decoded.claims.iat - leeway);