@opendatalabs/vana-sdk 4.3.1 → 4.3.2

package/dist/index.node.js

@@ -31529,6 +31529,7 @@ import {
 } from "./auth/errors.js";
 var WEB3_SIGNED_PREFIX = "Web3Signed ";
 var CLOCK_SKEW_SECONDS = 60;
+var MAX_WEB3SIGNED_LIFETIME_SECONDS = 15 * 60;
 function base64urlDecode(input) {
   let base64 = input.replace(/-/g, "+").replace(/_/g, "/");
   const padLength = (4 - base64.length % 4) % 4;
@@ -31641,6 +31642,14 @@ async function verifyWeb3Signed(params) {
   if (payload.iat > now + CLOCK_SKEW_SECONDS) {
     throw new ExpiredTokenError({ reason: "Token issued in the future" });
   }
+  const lifetime = payload.exp - payload.iat;
+  if (lifetime <= 0 || lifetime > MAX_WEB3SIGNED_LIFETIME_SECONDS) {
+    throw new ExpiredTokenError({
+      reason: "Token lifetime exceeds the maximum",
+      maxLifetimeSeconds: MAX_WEB3SIGNED_LIFETIME_SECONDS,
+      lifetimeSeconds: lifetime
+    });
+  }
   return { signer, payload };
 }