The TokenValidationParameters.LIFETIMEissettoFALSE, this means the JWT tokens lifetime is not validated. This can lead to an JWT token being used after it has expired, which has security implications. It is recommended to validate the JWT lifetime to ensure only valid tokens are used. Likelihood: HIGH Confidence: HIGH CWE: - CWE-613: Insufficient Session Expiration
OWASP: - A02:2017 - Broken Authentication
- A07:2021 - Identification and Authentication Failures