Native JWT expiry versus custom token revocation in Vert.x AuthProvider
Authentication goal and constraint Enforce least-privilege access in a Vert.x application while ensuring expired credentials produce explicit HTTP 401 responses instead of silent failures. The Vert.x AuthProvider interface permits timestamp validation inside authenticate, but the framework does not enforce a default token lifetime. Native JWT expiry keeps va
vertx