From d70c94cc1498fa5c81d432f2fd000669e3864172 Mon Sep 17 00:00:00 2001 From: oniani1 Date: Sat, 28 Mar 2026 22:41:17 +0400 Subject: [PATCH] fix: check SIWE ExpirationTime independently of NotBefore --- internal/api/web3.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/api/web3.go b/internal/api/web3.go index 2f731e9108..df444d03d1 100644 --- a/internal/api/web3.go +++ b/internal/api/web3.go @@ -244,7 +244,7 @@ func (a *API) web3GrantEthereum(ctx context.Context, w http.ResponseWriter, r *h return apierrors.NewOAuthError("invalid_grant", "Signed Ethereum message becomes valid in the future") } - if parsedMessage.NotBefore != nil && parsedMessage.ExpirationTime != nil && !parsedMessage.ExpirationTime.IsZero() && now.After(*parsedMessage.ExpirationTime) { + if parsedMessage.ExpirationTime != nil && !parsedMessage.ExpirationTime.IsZero() && now.After(*parsedMessage.ExpirationTime) { return apierrors.NewOAuthError("invalid_grant", "Signed Ethereum message is expired") }