mirror of
https://github.com/agessaman/meshcore-bot.git
synced 2026-10-01 11:57:54 +00:00
waev.app rejects a token whose exp is more than an hour past its iat, so the project-wide 24-hour default could never authenticate there — the operator saw only a bare auth failure with no hint that the lifetime was the problem, while the same public key worked from meshcoretomqtt. waev.app hosts now resolve to a 3600s TTL with renewal at 3500s when no value was configured for them, per broker or globally; a configured value still wins, and the substitution is logged. Matching is the apex and its subdomains only, so a lookalike host like waev.app.example.com does not qualify.