Use a default leeway of 0. Fixes #206

jwt · Sep 1, 2017 · a993b40 · a993b40
1 parent 20e40a4
commit a993b40
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 2 deletions.
diff --git a/lib/jwt/verify.rb b/lib/jwt/verify.rb
@@ -4,6 +4,10 @@
 module JWT
   # JWT verify methods
   class Verify
+    DEFAULTS = {
+      leeway: 0
+    }.freeze
+
     class << self
       %w(verify_aud verify_expiration verify_iat verify_iss verify_jti verify_not_before verify_sub).each do |method_name|
         define_method method_name do |payload, options|
@@ -21,7 +25,7 @@ def verify_claims(payload, options)
 
     def initialize(payload, options)
       @payload = payload
-      @options = options
+      @options = DEFAULTS.merge(options)
     end
 
     def verify_aud

diff --git a/spec/jwt/verify_spec.rb b/spec/jwt/verify_spec.rb
@@ -43,7 +43,6 @@ module JWT
     end
 
     context '.verify_expiration(payload, options)' do
-      let(:leeway) { 10 }
       let(:payload) { base_payload.merge('exp' => (Time.now.to_i - 5)) }
 
       it 'must raise JWT::ExpiredSignature when the token has expired' do
@@ -67,6 +66,16 @@ module JWT
           Verify.verify_expiration(payload, options)
         end.to raise_error JWT::ExpiredSignature
       end
+
+      context 'when leeway is not specified' do
+        let(:options) { {} }
+
+        it 'used a default leeway of 0' do
+          expect do
+            Verify.verify_expiration(payload, options)
+          end.to raise_error JWT::ExpiredSignature
+        end
+      end
     end
 
     context '.verify_iat(payload, options)' do