apiac_auth_client_jwt v1.0.0 APIacAuthClientJWT.JTIRegister behaviour View Source

Behaviour for modules implementing JTI registration, to prevent JWT replay

To avoid allowing use of a JWT in case the server's time changes backward, an implementation should use monotonic time (see System.monotonic_time/1).

Link to this section Summary

Callbacks

Registers a "jti" with its expiration date "exp"

Returns true if a "jti" is registered and not expired, false otherwise

Link to this section Callbacks

Link to this callback

register(jti, exp)

View Source
register(jti :: String.t(), exp :: non_neg_integer()) :: any()

Registers a "jti" with its expiration date "exp"

Link to this callback

registered?(jti)

View Source
registered?(jti :: String.t()) :: boolean()

Returns true if a "jti" is registered and not expired, false otherwise