From 41223b05d1e3ad7a67a2905c885ea990bed2218b Mon Sep 17 00:00:00 2001
From: Shirong Lu <73147033+happysnaker@users.noreply.github.com>
Date: Fri, 3 Jul 2026 17:25:28 +0800
Subject: [PATCH] fix: enable IssuedAt verification when WithIssuedAt() is used

The verifyIssuedAt call in the validator was passing 'false' for
the 'required' parameter, which means IssuedAt would never actually
be verified even when WithIssuedAt() was used.

Changed to 'true' so that the iat claim is properly validated.

Fixes #489
---
 validator.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/validator.go b/validator.go
index 1624640c..01d51c79 100644
--- a/validator.go
+++ b/validator.go
@@ -122,7 +122,7 @@ func (v *Validator) Validate(claims Claims) error {
 
 	// Check issued-at if the option is enabled
 	if v.verifyIat {
-		if err = v.verifyIssuedAt(claims, now, false); err != nil {
+		if err = v.verifyIssuedAt(claims, now, true); err != nil {
 			errs = append(errs, err)
 		}
 	}