How can I reset the JWT token expiration time?

Question

I have created a JWT token along with expiration time for authentication purpose. Each time when a url hits in the application i am checking for the token. I want to increase the JWT token expiration time. The following is how i done. but the token is expiring by taking the expiration time which is already set while creating the token.

//creating JWT token only once when user logged in

String jwtToken = new String(Jwts.builder().setSubject(user.getUserId())
                    .setExpiration(expTime).setIssuedAt(new Date())
                    .signWith(SignatureAlgorithm.HS256, "secretkey").compact());

// checking the presence of token every time

Claims claims = Jwts.parser().setSigningKey("secretkey")
                            .parseClaimsJws(jwtToken).getBody();

claims.setExpiration(time); // trying to reset the expiration time

I don't know what's going wrong. Any help would be much appreciated.

score 6 · Accepted Answer · edited May 23 '17 at 10:29

6

I think the expiration time is part of the token itself and it's not possible to extend the expiration time of a token without a new one.

Please refer to JWT (JSON Web Token) automatic prolongation of expiration for more discussion about this.

edited May 23 '17 at 10:29

Community

1
1

answered Jul 11 '16 at 12:23

score 5 · Answer 2 · answered Jul 11 '16 at 12:21

5

You'll need to recreate the token. All the information in the token is signed, making the token unique depending on the values in the token. Changing the claim that you pull from the token doesn't do anything.

answered Jul 11 '16 at 12:21

blur0224

972
8
26

score -1 · Answer 3 · answered Jan 17 '20 at 06:49

It seems expTime defined in the previous code lines.

ex:- You can change this value.

int expTime = 43200000 //after 12 hours(Should in ms)

I think the best practice is to set this in the property file as follows. Then you can change that time after building the project.

app.expTime=43200000

After that call this value from token provide file

@Value("${app.expTime}")
private int expTime;

How can I reset the JWT token expiration time?

3 Answers3