-
Notifications
You must be signed in to change notification settings - Fork 118
Open
Labels
L1Ethereum clientEthereum clientengine-apiCommunication between Consensus and ExecutionCommunication between Consensus and Execution
Description
It seems the crate we are using doesn't check the iat claim. We should test that the claims are properly validated and fail when they're invalid.
We can check the jwt.io webpage to find libraries that support "iat" validation: https://www.jwt.io/libraries?programming_language=rust
Metadata
Metadata
Assignees
Labels
L1Ethereum clientEthereum clientengine-apiCommunication between Consensus and ExecutionCommunication between Consensus and Execution
Type
Projects
Status
In Review