Fix exp claim validation (#33)

sgrampone · web-flow · commit 16535801d7d6 · 2020-08-04T12:25:29.000-03:00
diff --git a/dotnet/dotnetframework/GeneXusJWT/JWTClaims/RegisteredClaim.cs b/dotnet/dotnetframework/GeneXusJWT/JWTClaims/RegisteredClaim.cs
@@ -117,13 +117,13 @@ public static bool validateClaim(string registeredClaimKey, string registeredCla
 
                     if (registeredClaimCustomTime != 0)
                     {
-                        newTime = (Int32)(DateTime.UtcNow.AddSeconds(registeredClaimCustomTime).Subtract(new DateTime(1970, 1, 1))).TotalSeconds;
+                        newTime = (Int32)(DateTime.UtcNow.AddSeconds(-1*registeredClaimCustomTime).Subtract(new DateTime(1970, 1, 1))).TotalSeconds;
                     }
                     else
                     {
                         newTime = (Int32)(DateTime.UtcNow.Subtract(new DateTime(1970, 1, 1))).TotalSeconds;
                     }
-                    return (Int32)exp <= newTime;
+                    return (Int32)exp >= newTime;
                 case RegisteredClaim.sub:
                     return SecurityUtils.compareStrings(token.Payload.Sub, registeredClaimValue);
                 case RegisteredClaim.aud:

Original file line number	Diff line number	Diff line change
`@@ -117,13 +117,13 @@ public static bool validateClaim(string registeredClaimKey, string registeredCla`
`117`	`117`
`118`	`118`	`if (registeredClaimCustomTime != 0)`
`119`	`119`	`{`
`120`		`- newTime = (Int32)(DateTime.UtcNow.AddSeconds(registeredClaimCustomTime).Subtract(new DateTime(1970, 1, 1))).TotalSeconds;`
	`120`	`+ newTime = (Int32)(DateTime.UtcNow.AddSeconds(-1*registeredClaimCustomTime).Subtract(new DateTime(1970, 1, 1))).TotalSeconds;`
`121`	`121`	`}`
`122`	`122`	`else`
`123`	`123`	`{`
`124`	`124`	`newTime = (Int32)(DateTime.UtcNow.Subtract(new DateTime(1970, 1, 1))).TotalSeconds;`
`125`	`125`	`}`
`126`		`- return (Int32)exp <= newTime;`
	`126`	`+ return (Int32)exp >= newTime;`
`127`	`127`	`case RegisteredClaim.sub:`
`128`	`128`	`return SecurityUtils.compareStrings(token.Payload.Sub, registeredClaimValue);`
`129`	`129`	`case RegisteredClaim.aud:`