@opendatalabs/vana-sdk 4.3.0 → 4.3.2

package/dist/index.node.cjs

@@ -31810,6 +31810,7 @@ var import_viem13 = require("viem");
 var import_errors = require("./auth/errors.cjs");
 var WEB3_SIGNED_PREFIX = "Web3Signed ";
 var CLOCK_SKEW_SECONDS = 60;
+var MAX_WEB3SIGNED_LIFETIME_SECONDS = 15 * 60;
 function base64urlDecode(input) {
   let base64 = input.replace(/-/g, "+").replace(/_/g, "/");
   const padLength = (4 - base64.length % 4) % 4;
@@ -31922,6 +31923,14 @@ async function verifyWeb3Signed(params) {
   if (payload.iat > now + CLOCK_SKEW_SECONDS) {
     throw new import_errors.ExpiredTokenError({ reason: "Token issued in the future" });
   }
+  const lifetime = payload.exp - payload.iat;
+  if (lifetime <= 0 || lifetime > MAX_WEB3SIGNED_LIFETIME_SECONDS) {
+    throw new import_errors.ExpiredTokenError({
+      reason: "Token lifetime exceeds the maximum",
+      maxLifetimeSeconds: MAX_WEB3SIGNED_LIFETIME_SECONDS,
+      lifetimeSeconds: lifetime
+    });
+  }
   return { signer, payload };
 }