in app/auth/BearerTokenAuth.scala [185:198]
def checkExpiry(claims:JWTClaimsSet):Either[LoginResult,LoginResultOK[JWTClaimsSet]] = {
if(claims.getExpirationTime.before(Date.from(Instant.now()))) {
logger.debug(s"JWT was valid but expired at ${claims.getExpirationTime.formatted("YYYY-MM-dd HH:mm:ss")}")
Left(LoginResultExpired(claims.getSubject))
} else {
val isAdmin = jwtIsAdmin(claims)
if(isAdmin) {
logger.info(s"${claims.getSubject} (${claims.getStringClaim("email")}) is an administrator")
} else {
logger.info(s"${claims.getSubject} (${claims.getStringClaim("email")}) is not an administrator")
}
Right(LoginResultOK(claims, isAdmin))
}
}