Merge pull request #4678 from hypothesis/remove-future-token-verify-t…

…ests

Don't test that JWT's issued in future are invalid

I'm optimistically going to assume that there aren't any objections. :)

tests/h/auth/tokens_test.py

@@ -48,11 +48,6 @@ def test_token_with_past_expiry_is_not_valid(self):
     lambda k: jwt.encode({'exp': _seconds_from_now(-3600)},
                          key=k),
 
-    # Issued in the future
-    lambda k: jwt.encode({'exp': _seconds_from_now(3600),
-                          'iat': _seconds_from_now(1800)},
-                         key=k),
-
     # Incorrect encoding key
     lambda k: jwt.encode({'exp': _seconds_from_now(3600)},
                          key='somethingelse'),

tests/h/oauth/jwt_grant_token_test.py

@@ -173,15 +173,6 @@ def test_init_raises_for_nbf_claim_in_future(self, claims):
 
         assert exc.value.description == 'Grant token is not yet valid.'
 
-    def test_init_raises_for_iat_claim_in_future(self, claims):
-        claims['iat'] = epoch(delta=timedelta(minutes=13))
-        jwttok = jwt_token(claims)
-
-        with pytest.raises(InvalidGrantError) as exc:
-            VerifiedJWTGrantToken(jwttok, 'top-secret', 'test-audience')
-
-        assert exc.value.description == 'Grant token issue time (iat) is in the future.'
-
     def test_expiry_returns_exp_claim(self, claims):
         now = datetime.utcnow().replace(microsecond=0)
         delta = timedelta(minutes=2)