fix: adjust iat and nbf for id token signing (#625)

blockchain-lab-um · Apr 12, 2024 · f29e494 · f29e494
1 parent 45a1293
commit f29e494
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/.changeset/young-forks-jog.md b/.changeset/young-forks-jog.md
@@ -0,0 +1,5 @@
+---
+"@blockchain-lab-um/masca": patch
+---
+
+Adjust nbf and iat for idtoken signing
diff --git a/packages/snap/snap.manifest.json b/packages/snap/snap.manifest.json
@@ -26,7 +26,7 @@
       "./files/circuits/credentialAtomicQuerySigV2/circuit_final.zkey",
       "./files/circuits/credentialAtomicQuerySigV2/verification_key.json"
     ],
-    "shasum": "BOsLk3unGah8h8EbmeUV37papTKym1Tlb+sYI/sK1wg="
+    "shasum": "BxBaqzALa1v9aL1XW5mcXd/ppZOisCN+LmrEjpifQ4E="
   },
   "initialPermissions": {
     "endowment:ethereum-provider": {},

diff --git a/packages/snap/src/utils/sign.ts b/packages/snap/src/utils/sign.ts
@@ -26,9 +26,9 @@ export const sign = async (signArgs: SignArgs, signOptions: SignOptions) => {
 
   const jwtPayload = {
     ...signArgs.payload,
-    exp: Math.floor(Date.now() / 1000) + 60 * 60,
-    iat: Math.floor(Date.now() / 1000),
-    nbf: Math.floor(Date.now() / 1000),
+    exp: Math.floor(new Date().getTime() / 1000) + 60 * 60, // 1 hour in the future
+    iat: Math.floor(new Date().getTime() / 1000) - 60, // 1 minute in the past
+    nbf: Math.floor(new Date().getTime() / 1000) - 60, // 1 minute in the past
     iss: did,
     sub: did,
   };