android pay - Google Wallet JWT "exp" parameter -



android pay - Google Wallet JWT "exp" parameter -

i integrating google wallet on website, , didn't find reply anywhere. can "exp" parameter of jwt token more hour? see on every guide or library:

'exp' => time() + 3600,

but, else? 2 hours:

'exp' => time() + 7200,

thanks!

from spec

the exp (expiration time) claim identifies expiration time on or after jwt must not accepted processing. processing of exp claim requires current date/time must before expiration date/time listed in exp claim. implementers may provide little leeway, no more few minutes, business relationship clock skew. value must number containing numericdate value. utilize of claim optional.)

i haven't tested "max" google allow. however, could matter you more - re: how long specific transaction supposed "good". (when) should expire/be invalidated? should worried of replays?

hth...

android-pay jwt

Comments

Popular posts from this blog

Delphi change the assembly code of a running process -

json - Hibernate and Jackson (java.lang.IllegalStateException: Cannot call sendError() after the response has been committed) -

C++ 11 "class" keyword -