mirror of
https://github.com/docker/compose.git
synced 2026-10-12 02:13:08 +00:00
The session payload may carry no claims, in which case the access token was reused for a minute without any expiry check, so an expired token could reach the registry and fail the pull instead of falling back. Read the exp claim from the JWT itself in that case. An expiry that cannot be read is still tolerated. Signed-off-by: Alano Terblanche <[email protected]>