Documents finding: no replay protection in NIP-98 verification. Token replay within 120s window succeeds (mitigated by JWT issuance being idempotent). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Documents finding: no replay protection in NIP-98 verification. Token replay within 120s window succeeds (mitigated by JWT issuance being idempotent). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>