Will Pfleger af7979e1ca test(auth): read the clock once in NIP-FI until test (#8457) ...

🤖 The exact NIP-FI assertion-lifetime boundary test could fail when its
JWT helper read the clock, then ES256 signing crossed a whole-second
boundary. The token's `until` claim could land one second beyond the
verifier's `now + skew + maximum_age` ceiling even though both were
intended to use the same test instant.

This changes the test helper to accept a captured instant and uses that
instant for both the JWT time claims and `verify_at`. The boundary
remains strict: `now + 3630s` is accepted and `now + 3631s` is rejected.
No production code changes.

Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Alia <d32955ad69077062930cc46cfe2df30ca9aaf6f8e76422681265e9e9af704d78@buzz.block.builderlab.xyz>
Co-authored-by: Alia <d32955ad69077062930cc46cfe2df30ca9aaf6f8e76422681265e9e9af704d78@buzz.block.builderlab.xyz>

2026-10-19 17:37:12 +00:00

..

src

test(auth): read the clock once in NIP-FI until test (#8457)

2026-10-19 17:37:12 +00:00

tests

feat(auth): support explicit mesh JWKS transport (#8382)

2026-10-16 14:26:08 -04:00

Cargo.toml

feat(nip-fi): admin disconnect/deny API with in-memory deny-until-TTL map (S4) (#7977)

2026-10-01 19:40:09 +00:00