in assertion/pkg/tasks/assertion/verify.go [136:150]
func (t *Verify) validateClaims(claims *jwt.Claims) error {
// Check claims
if claims.Expiry.Time().Before(time.Now()) {
return fmt.Errorf("expired assertion")
}
if claims.NotBefore.Time().After(time.Now()) {
return fmt.Errorf("assertion not useable yet")
}
if claims.Issuer != "harp-assertion" {
return fmt.Errorf("invalid assertion, unexpected issuer '%s'", claims.Issuer)
}
// No error
return nil
}