Merge pull request #8 from nmemoto/fix-iat-verification

Fixed the condition to judge as valid iat

Author: Code-Hex

src/jwt-decoder.ts

@@ -96,7 +96,7 @@ const decodePayload = (payloadPart: string, currentTimestamp: number): DecodedPa
     throw new JwtError(JwtErrorCode.INVALID_ARGUMENT, `"iat" claim must be a number but got "${payload.iat}"`);
   }
 
-  if (currentTimestamp <= payload.iat) {
+  if (currentTimestamp < payload.iat) {
     throw new JwtError(
       JwtErrorCode.INVALID_ARGUMENT,
       `Incorrect "iat" claim must be a older than "${currentTimestamp}" (iat: "${payload.iat}")`

tests/jwt-decoder.test.ts

@@ -87,17 +87,6 @@ describe('TokenDecoder', () => {
           `Incorrect "iat" claim must be a older than "${currentTimestamp}" (iat: "${currentTimestamp + 10000}")`
         ),
       ],
-      [
-        'iat is now',
-        {
-          ...payload,
-          iat: currentTimestamp,
-        },
-        new JwtError(
-          JwtErrorCode.INVALID_ARGUMENT,
-          `Incorrect "iat" claim must be a older than "${currentTimestamp}" (iat: "${currentTimestamp}")`
-        ),
-      ],
       [
         'exp is in past',
         {