Robert Clapp
@RobertClapp
参加 June 2009
1.2K フォロー中 134 ファン
swapping python-jose for PyJWT in CareCompanion cleared Trivy CVEs, but 30s leeway for future IAT silently stretched EXP.
at the auth boundary, global leeway lets logged-out tokens validate for an extra 30s.
dropping leeway and disabling verify_iat keeps strict EXP checks.
もっと見る
