Verifying a JWT succeeds after the token has expired

[Former user]

The title explains the crux of the problem. Additional details include: - ECKey (public key) - Curve: SECP256K1 - Algorithm: ES256K

The JWT was also signed with the same type of curve and algorithm, but from a JavaScript library.

[Yavor Vasilev]

Hi,

Could you post a snippet or test case demonstrating how the verification is done?

The signature / alg type is not relevant and is independent from the JWT claims verification.

[Yavor Vasilev]

No response, closing for now.