Why does the token work after its expiry time JWT?

Question

ASP.NET

I have a token its time is 2 minutes but it works even after 2 minutes why? But it doesn't work until after 5 minutes

Answer 1

When setting up authentication, you can specify whether to check the validity period of the token, specifically where, depends on the version of asp.net

Answer 2

There are 2 options
- You do not correctly specify the end time of the JWT when creating it
- You do not correctly check the end time of the JWT