Usage of nbf in json web tokens

It definitely is up to how you interpret the time.

One of possible scenarios I could make up is literally – when a token must last from some particular point in time til another point in time.

Say, you’re selling some API or resource. And a client purchased access that lasts for one hour and the access starts tomorrow in the midday.

So you issue a JWT with:

  • iat set to now
  • nbf set to tomorrow 12:00pm
  • exp set to tomorrow 1:00pm

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)