So before we actually start working on the middle, where on our back and I have a bit of a challenge
for you and it's a pretty straightforward one and you shouldn't have any difficulty with it, but I
thought I'd give you a chance to try things out on your own inner authenticate token function inside
the handler, stash a big go.
At no point are we validating whether or not a token has expired.
If you recall, we issued tokens and we give them an expiry of 24 hours and yet we were doing nothing
with that expiry.
So if I get a token on January the 1st and then leave the site and come back in July, that token will
still pass muster.
And that's no good.
We actually want to check for expiry.
So I'm going to challenge you to figure out how to implement that check for expiry.
And I'll give you a few hints to start with over in tokens, Dogo.
In the insert token functionality, you're going to have to make a change to that function to insert
token, and you're also going to have to make a change to this one, get user for token.
And it's not terribly challenging, but you should be able to do this on your own without much difficulty.
So you give it a try.
And in the next lecture, I'll show you how I implemented that functionality.