feat: check if jwt is still valid

1 files changed, 7 insertions, 2 deletions

diff --git a/bin/idp b/bin/idp
index 83c33e45..fdc6ab79 100755
--- a/bin/idp
+++ b/bin/idp
@@ -341,12 +341,17 @@ module Authz
         iat: now,
         nbf: now,
         jti: SecureRandom.uuid,
+        exp: now + 3600,
       }.merge(claims)
     end
 
+    def [](claim)
+      claims.fetch(claim)
+    end
+
     def active?
-      # TODO:: check if current time is within valid range
-      true
+      now = Time.now.to_i
+      self[:nbf] <= now && now < self[:exp]
     end
 
     def to_jwt