parseSecurePlaintextToken validUntil

2023-08-19 07:05:50 +00:00
parent 65bf02a3aa
commit 56a9c5bc45
1 changed files with 6 additions and 0 deletions
@@ -153,6 +153,12 @@ export async function generateSecurePlaintextToken<T extends object>(validUntil:
 }

 export async function parseSecurePlaintextToken<T extends object>(secureToken: SecurePlaintextToken, presharedTokenSecret?: string): Promise<T> {
+    const now = new Date();
+    const validUntil = new Date(secureToken.validUntil);
+    if (now > validUntil) {
+        throw new Error("token expired");
+    }
+
    if (!presharedTokenSecret) {
        if (!staticPresharedTokenSecret) {
            throw new Error("PRESHARED_TOKEN_SECRET is not set");