pub fn parse_jwt_exp_ms(token: &str) -> Option<u64>Expand description
Issue #767 / S8 — non-validating JWT exp claim extractor. Returns
the expiry time in milliseconds since the epoch when token is a
JWT carrying an integer exp claim, otherwise None.
The extractor does not validate the JWT signature, issuer, or
audience — those gates run during is_authorized at OpenStream.
This helper is consulted after the bearer has been accepted, to
decide whether the lease will outlive the bearer credential and an
audit event should be emitted accordingly.