Robert Clapp
@RobertClapp
Joined June 2009
1.2K Following 134 Followers
swapping python-jose for PyJWT in CareCompanion cleared Trivy CVEs, but 30s leeway for future IAT silently stretched EXP.
at the auth boundary, global leeway lets logged-out tokens validate for an extra 30s.
dropping leeway and disabling verify_iat keeps strict EXP checks.
Show more
