PyJWT not raising an ExpiredSignatureError

Question

I'll come straight to the point:

jwt.encode({'sub':"abc", "iat":datetime.now(tz=timezone.utc), "exp":datetime.now()+timedelta(seconds=1)}, JWT_KEY, algorithm="HS256")

time.sleep(3)

    try:
        return jwt.decode(token, JWT_KEY, algorithms=["HS256"])
    except jwt.ExpiredSignatureError:
        raise Exception("JWT expired")

But it won't raise the desired exception even though the current time is behind the exp timestamp

see also [Using a pyJWT expiration time](https://stackoverflow.com/q/73837617) — jps, Jun 10 '23 at 09:31

score 0 · Answer 1 · answered Jun 10 '23 at 09:19

The problem was the creation of the token.

I just forgot to add tz=timezone.utc into the exp flag like I did with the iat flag.

So, the working code:

jwt.encode({'sub':"abc", "iat":datetime.now(tz=timezone.utc), "exp":datetime.now(tz=timezone.utc)+timedelta(seconds=1)}, JWT_KEY, algorithm="HS256")

1 Answers1