Signing With TimestampsΒΆ
If you want to expire signatures you can use the
TimestampSigner
class which will adds timestamp information and
signs it. On unsigning you can validate that the timestamp did not
expire:
from itsdangerous import TimestampSigner
s = TimestampSigner('secret-key')
string = s.sign('foo')
s.unsign(string, max_age=5)
Traceback (most recent call last):
...
itsdangerous.exc.SignatureExpired: Signature age 15 > 5 seconds