validateClaimsTime method

bool validateClaimsTime(
  1. DateTime now, {
  2. Duration clockSkew = const Duration(minutes: 5),
})

Validates exp, iat, and auth_time claims using the provided now time and optional clockSkew leeway.

Implementation

bool validateClaimsTime(
  DateTime now, {
  Duration clockSkew = const Duration(minutes: 5),
}) {
  final validateExp = _isClaimDateValid(
    exp,
    now,
    clockSkew: clockSkew,
  );
  final validateIat = _isClaimDateValid(
    iat,
    now,
    clockSkew: clockSkew,
    mustBePast: true,
  );
  final validateAuthTime = _isClaimDateValid(
    authTime,
    now,
    clockSkew: clockSkew,
    mustBePast: true,
  );

  if (!validateExp) log('Token expired');
  if (!validateIat) log('Token issued in the future');
  if (!validateAuthTime) log('Token issued before authentication');

  return validateExp && validateIat && validateAuthTime;
}