Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Don't test that JWT's issued in future are invalid
Remove two tests that JWT's whose `iat` value claims that they were issued in the future fail validation. These two tests fail on newer versions of PyJWT: #4672 This is because PyJWT no longer raises an exception for future `iat` times: jpadilla/pyjwt#190 PyJWT removed this validation because: - Clock skew can cause one party to generate `iat` times a few seconds or minutes ahead of another's current time - The JWT spec (RFC 7519) doesn't say that a JWT with a future `iat` should be considered invalid, these JWTs are valid - Other JWT libraries don't do this check
- Loading branch information