mod_http_file_share: Include time of issuance in auth token
In case an external upload service wants to have the original creation
time, or calculate the token expiry itself.
--- a/plugins/mod_http_file_share.lua Mon Apr 05 17:15:12 2021 +0200
+++ b/plugins/mod_http_file_share.lua Mon Apr 05 17:16:18 2021 +0200
@@ -133,10 +133,12 @@
end
function get_authz(slot, uploader, filename, filesize, filetype)
+local now = os.time();
return jwt.sign(secret, {
-- token properties
sub = uploader;
- exp = os.time()+300;
+ iat = now;
+ exp = now+300;
-- slot properties
slot = slot;