summaryrefslogtreecommitdiff
path: root/src/mongo/crypto/jwt_types.idl
diff options
context:
space:
mode:
Diffstat (limited to 'src/mongo/crypto/jwt_types.idl')
-rw-r--r--src/mongo/crypto/jwt_types.idl18
1 files changed, 8 insertions, 10 deletions
diff --git a/src/mongo/crypto/jwt_types.idl b/src/mongo/crypto/jwt_types.idl
index d4f5f15e418..f8cc4034e8b 100644
--- a/src/mongo/crypto/jwt_types.idl
+++ b/src/mongo/crypto/jwt_types.idl
@@ -109,15 +109,13 @@ structs:
type:
variant: [string, array<string>]
cpp_name: audience
- iat:
- description: Time at which the JWT was issued. (Unix Epoch)
- type: safeInt64
- cpp_name: issuedAtEpoch
+ nbf:
+ description: Time at which the JWT becomes valid. (Unix Epoch)
+ type: unixEpoch
+ cpp_name: notBefore
+ optional: true
exp:
description: Time at which the JWT expires. (Unix Epoch)
- type: safeInt64
- cpp_name: expirationEpoch
- auth_time:
- description: Time when the authentication occurred. (Unix Epoch)
- type: safeInt64
- optional: true
+ type: unixEpoch
+ cpp_name: expiration
+ optional: false # RFC7519 marks this optional, but we refuse to accept non-expiring tokens.