Check expiration before sending claims

1 files changed, 6 insertions, 0 deletions

diff --git a/src/models/auth.rs b/src/models/auth.rs
index 0c860df..36a0175 100644
--- a/src/models/auth.rs
+++ b/src/models/auth.rs
@@ -101,6 +101,12 @@ where
         let token_data = decode::<Claims>(bearer.token(), &KEYS.decoding, &Validation::default())
             .map_err(|_| AppError::InvalidToken)?;
 
+        let now = Local::now().timestamp() as usize;
+
+        if token_data.claims.exp < now {
+            return Err(AppError::InvalidToken);
+        }
+
         Ok(token_data.claims)
     }
 }