Add nbf claim to JWTs. Closes #675.

alitheg · alitheg · commit a0927d24923e · 2026-02-17T10:06:47.000Z
diff --git a/atr/jwtoken.py b/atr/jwtoken.py
@@ -56,6 +56,7 @@ def issue(uid: str, *, ttl: int = _ATR_JWT_TTL) -> str:
         "iss": _ATR_JWT_ISSUER,
         "aud": _ATR_JWT_AUDIENCE,
         "iat": now,
+        "nbf": now,
         "exp": now + datetime.timedelta(seconds=ttl),
         "jti": secrets.token_hex(128 // 8),
     }

Original file line number	Diff line number	Diff line change
`@@ -56,6 +56,7 @@ def issue(uid: str, *, ttl: int = _ATR_JWT_TTL) -> str:`
`56`	`56`	`"iss": _ATR_JWT_ISSUER,`
`57`	`57`	`"aud": _ATR_JWT_AUDIENCE,`
`58`	`58`	`"iat": now,`
	`59`	`+ "nbf": now,`
`59`	`60`	`"exp": now + datetime.timedelta(seconds=ttl),`
`60`	`61`	`"jti": secrets.token_hex(128 // 8),`
`61`	`62`	`}`