android pay - Google Wallet JWT "exp" parameter -
android pay - Google Wallet JWT "exp" parameter -
i integrating google wallet on website, , didn't find reply anywhere. can "exp" parameter of jwt token more hour? see on every guide or library:
'exp' => time() + 3600,
but, else? 2 hours:
'exp' => time() + 7200,
thanks!
from spec
the exp (expiration time) claim identifies expiration time on or after jwt must not accepted processing. processing of exp claim requires current date/time must before expiration date/time listed in exp claim. implementers may provide little leeway, no more few minutes, business relationship clock skew. value must number containing numericdate value. utilize of claim optional.)
i haven't tested "max" google allow. however, could matter you more - re: how long specific transaction supposed "good". (when) should expire/be invalidated? should worried of replays?
hth...
android-pay jwt
Comments
Post a Comment