ExpiredException throws 500 error about cakephp-jwt-auth HOT 6 CLOSED

With debug on the authenticate class throws the same exception which Jwt lib throws (for which cake most likely returns 500 status).

With debug off you will get UnauthorizedException with 401 status (if JwtAuthenticate is the last authenticate class in list provided for authenticate config of AuthComponent.

from cakephp-jwt-auth.

FWIW I remember having tested token expiration using this plugin and it responded with the correct error code (I believe it was 419) and not a 500 error. Are you sure you are testing the right way?

from cakephp-jwt-auth.

Positive. I am looking at it right now.
The client side program does make a .json extension request though.
Perhaps it handles mapped resources differently?

from cakephp-jwt-auth.

Are you checking with debug on or off?

from cakephp-jwt-auth.

Yup, you're right.
Works correctly with debug off.
Is there a way around this, though? Makes testing pretty difficult.

from cakephp-jwt-auth.

You can provide a patch to make this behavior configurable. Here's where you will need to add extra check.

from cakephp-jwt-auth.