OWASPASVS 5.0 requirement
ASVS-V9.2.1 Verify that, if a validity time span is present in the token data, the token and its content are accepted only if the verification time is…
- Standard
- OWASP ASVS 5.0
- Chapter
- V9 Self-contained Tokens
- Section
- V9.2 Token content
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that, if a validity time span is present in the token data, the token and its content are accepted only if the verification time is within this validity time span. For example, for JWTs, the claims 'nbf' and 'exp' must be verified.