From 80572ded78f3408bab6aa8d11df1aa2e44121ada Mon Sep 17 00:00:00 2001
From: mqf20 <mingqingfoo@gmail.com>
Date: Mon, 27 Jan 2025 13:39:26 +0800
Subject: [PATCH] check access token expiration

---
 example/server/storage/storage.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/example/server/storage/storage.go b/example/server/storage/storage.go
index d8b7a5d..3809784 100644
--- a/example/server/storage/storage.go
+++ b/example/server/storage/storage.go
@@ -488,6 +488,9 @@ func (s *Storage) SetUserinfoFromToken(ctx context.Context, userinfo *oidc.UserI
 	//		return err
 	//	}
 	//}
+	if token.Expiration.Before(time.Now()) {
+		return fmt.Errorf("token is expired")
+	}
 	return s.setUserinfo(ctx, userinfo, token.Subject, token.ApplicationID, token.Scopes)
 }