The default exp value causes a 401 error, which is difficult to detect and debug

[tqtifnypmb]

According to Apple Doc:

The token’s expiration time, in UNIX time, in seconds. Tokens that expire more than 60 minutes after the time in iat are not valid (Ex: 1623086400)

I found that tokens generated with a one-hour exp value (the library’s default) are also invalid (causing 401 error). It would be better to use a more suitable default.

[richzw]

@tqtifnypmb , You could custom the Expire time through ExpiredAtFunc https://github.com/richzw/appstore/blob/master/token.go#L35C2-L35C15

[tqtifnypmb]

I knew that, I just think it would be better to use a more appropriate default.

[richzw]

I knew that, I just think it would be better to use a more appropriate default.

Yup, Maybe the 59 minutes, a little less than 60 minutes could be better.