fix(jwt): prevent null reference in LifetimeValidator for tokens without exp

engineering87 · engineering87 · commit b360a53a6c6b · 2025-11-17T00:25:09.000+01:00
diff --git a/src/WART-Core/Authentication/JWT/JwtServiceCollectionExtension.cs b/src/WART-Core/Authentication/JWT/JwtServiceCollectionExtension.cs
@@ -63,7 +63,7 @@ public static IServiceCollection AddJwtMiddleware(this IServiceCollection servic
                 options.TokenValidationParameters =
                     new TokenValidationParameters
                     {
-                        LifetimeValidator = (before, expires, token, parameters) => expires > DateTime.UtcNow,
+                        LifetimeValidator = (before, expires, token, parameters) => expires != null && expires > DateTime.UtcNow,
                         ValidateAudience = false,
                         ValidateIssuer = false,
                         ValidateActor = false,

Original file line number	Diff line number	Diff line change
`@@ -63,7 +63,7 @@ public static IServiceCollection AddJwtMiddleware(this IServiceCollection servic`
`63`	`63`	`options.TokenValidationParameters =`
`64`	`64`	`new TokenValidationParameters`
`65`	`65`	`{`
`66`		`- LifetimeValidator = (before, expires, token, parameters) => expires > DateTime.UtcNow,`
	`66`	`+ LifetimeValidator = (before, expires, token, parameters) => expires != null && expires > DateTime.UtcNow,`
`67`	`67`	`ValidateAudience = false,`
`68`	`68`	`ValidateIssuer = false,`
`69`	`69`	`ValidateActor = false,`