use GetTime when validating "iat" claim
diff --git a/jwt/jwt.go b/jwt/jwt.go index d29c43a..e747bd9 100644 --- a/jwt/jwt.go +++ b/jwt/jwt.go
@@ -59,9 +59,10 @@ j.Claims().Get("sub") != sub { return ErrInvalidSUBClaim } - if iat, ok := v.Expected.IssuedAt(); ok && - j.Claims().Get("iat") != iat { - return ErrInvalidIATClaim + if iat, ok := v.Expected.IssuedAt(); ok { + if t, ok := j.Claims().GetTime("iat"); t != iat && ok { + return ErrInvalidIATClaim + } } if jti, ok := v.Expected.JWTID(); ok && j.Claims().Get("jti") != jti {