Skip to content

ID Token validation should use JwtTimestampValidator #6964

Closed
@jgrandja

Description

@jgrandja

OidcIdTokenDecoderFactory and ReactiveOidcIdTokenDecoderFactory use OidcIdTokenValidator for validating the ID Token. It should also use JwtTimestampValidator during the validation process.

Metadata

Metadata

Assignees

Labels

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)type: bugA general bug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions