JWT claims.Expiration and local client time

[Czech_Tomasz]

Hi,

Question concerning this situation. I have XDATA Rest server with set to AccessToken
claims.Expiration := IncMinute(now, 20);

From the browser/client side I would have the opportunity to check if the token expired before run the xdata rest service function.

When I get from existing Token claim Expiration time it is local time set on the server ... but our client e.g. has different time zone. In this case should I during Token creation add extra claim e.g. like this

JWTAccessToken.Claims.SetClaimOfType<string>('TokenExpiration', DateToISO8601(JWTAccessToken.Claims.Expiration));

or I'm able to change the existing claims.Expiration to client local time?

[wlandgraf (Wagner Landgraf)]

The 'exp' claim in JWT is already in Unix time, which means it's UTC. So there is no need for an extra claim.

It's not clear what your JWTAccessToken.Claims.Expiration is, so I can't tell if Expiration returns the value in UTC or local time zone.

If it's UTC, just use TTimeZone.Local.ToLocalTime to convert it to your local time zone.

[Czech_Tomasz]

Ok ... thank you ... now everything is clear.