From 56a9c5bc45ea6230e3217a834f1e48b4097b6de3 Mon Sep 17 00:00:00 2001
From: Hide_D <hided62@gmail.com>
Date: Sat, 19 Aug 2023 07:05:50 +0000
Subject: [PATCH] parseSecurePlaintextToken validUntil

---
 server/SecureToken.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/server/SecureToken.ts b/server/SecureToken.ts
index 870081d..ccd1bc1 100644
--- a/server/SecureToken.ts
+++ b/server/SecureToken.ts
@@ -153,6 +153,12 @@ export async function generateSecurePlaintextToken<T extends object>(validUntil:
 }
 
 export async function parseSecurePlaintextToken<T extends object>(secureToken: SecurePlaintextToken, presharedTokenSecret?: string): Promise<T> {
+    const now = new Date();
+    const validUntil = new Date(secureToken.validUntil);
+    if (now > validUntil) {
+        throw new Error("token expired");
+    }
+
     if (!presharedTokenSecret) {
         if (!staticPresharedTokenSecret) {
             throw new Error("PRESHARED_TOKEN_SECRET is not set");