JWT creation and verification using python-jose

jwtest.py

from jose import jwt
from jose.jwt import JWTClaimsError, JWTError, ExpiredSignatureError
from datetime import datetime, timedelta
import time

key = 'secret#%$sdfasdkflj@#%RFsaior82340-fweASDFSD928354940k'

expdelta = timedelta(seconds=10)
now = datetime.utcnow()
exp = now + expdelta

payload = {
        'iss': 'calce',
        'nbf': now,
        'iat': now,
        'exp': exp
        }
token = jwt.encode(payload, key, algorithm='HS256')

# this fails because of issuer
try:
    claims = jwt.decode(token, key, issuer='pepito')
except JWTClaimsError:
    print('failed validation with issuer pepito')

# Now validate and should be ok
try:
    claims = jwt.decode(token, key, issuer="calce")
    print('token verification succeeded')
except JWTError:
    print('token verification failed!')

# wait 11 seconds to make it fail
print('waiting 11 seconds. hold on. btw, signature should fail after this message')
time.sleep(11)

try:
    claims = jwt.decode(token, key, issuer="calce")
    print('signature still verifies, whaT!')
except ExpiredSignatureError:
    print('Signature expired, bummer!')