From 9f8c2b195966a21169e56bd43974ad10b2308f56 Mon Sep 17 00:00:00 2001
From: pronchev <nikolay@pronchev.ru>
Date: Sun, 12 Apr 2026 01:40:54 +0300
Subject: [PATCH] Fix missing nbf

---
 src/Auth/JwtService.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/Auth/JwtService.php b/src/Auth/JwtService.php
index 8a93416..18af857 100644
--- a/src/Auth/JwtService.php
+++ b/src/Auth/JwtService.php
@@ -45,6 +45,7 @@ final class JwtService
         $now   = new DateTimeImmutable();
         $token = $this->jwtConfig->builder()
             ->issuedAt($now)
+            ->canOnlyBeUsedAfter($now)
             ->expiresAt($now->modify("+{$this->accessTtl} seconds"))
             ->relatedTo($userId)
             ->getToken($this->jwtConfig->signer(), $this->jwtConfig->signingKey());