# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1617635778 -7200
# Node ID 8fd760c04cdf33fdebc26334f6497293eb9b36aa
# Parent  2c9db2278fedf594a1c595aaf1e9748b6a4fd3f3
mod_http_file_share: Include time of issuance in auth token

In case an external upload service wants to have the original creation
time, or calculate the token expiry itself.

diff -r 2c9db2278fed -r 8fd760c04cdf plugins/mod_http_file_share.lua
--- a/plugins/mod_http_file_share.lua	Mon Apr 05 17:15:12 2021 +0200
+++ b/plugins/mod_http_file_share.lua	Mon Apr 05 17:16:18 2021 +0200
@@ -133,10 +133,12 @@
 end
 
 function get_authz(slot, uploader, filename, filesize, filetype)
+local now = os.time();
 	return jwt.sign(secret, {
 		-- token properties
 		sub = uploader;
-		exp = os.time()+300;
+		iat = now;
+		exp = now+300;
 
 		-- slot properties
 		slot = slot;