Skip to content

fix: add expiration to JWT tokens#196

Open
kRyxar87t wants to merge 1 commit into
chthonn:mainfrom
kRyxar87t:fix/jwt-expiration-147
Open

fix: add expiration to JWT tokens#196
kRyxar87t wants to merge 1 commit into
chthonn:mainfrom
kRyxar87t:fix/jwt-expiration-147

Conversation

@kRyxar87t

Copy link
Copy Markdown

Summary

Fixed JWT tokens being generated without expiration.

Changes

  • Added expiration time to authentication JWT tokens
  • Updated signin token generation
  • Updated profile update token regeneration
  • Prevented perpetual session tokens

Security Impact

Tokens now expire after 7 days, reducing risk from leaked or compromised JWTs.

Fixes #147

Testing

  • Verified JWT generation includes expiry
  • Checked existing authentication flow

@kRyxar87t kRyxar87t requested a review from chthonn as a code owner June 5, 2026 09:38
@vercel

vercel Bot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

@kRyxar87t is attempting to deploy a commit to the Sunil Kumar's projects Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: JWT tokens never expire — perpetual session tokens

1 participant