{"action":"created","issue":{"url":"https://api.github.com/repos/hueniverse/iron/issues/41","labels_url":"https://api.github.com/repos/hueniverse/iron/issues/41/labels{/name}","comments_url":"https://api.github.com/repos/hueniverse/iron/issues/41/comments","events_url":"https://api.github.com/repos/hueniverse/iron/issues/41/events","html_url":"https://github.com/hueniverse/iron/issues/41","id":129691444,"number":41,"title":"TTL is not working ....","user":{"login":"balaphp","id":5578877,"avatar_url":"https://avatars.githubusercontent.com/u/5578877?v=3","gravatar_id":"","url":"https://api.github.com/users/balaphp","html_url":"https://github.com/balaphp","followers_url":"https://api.github.com/users/balaphp/followers","following_url":"https://api.github.com/users/balaphp/following{/other_user}","gists_url":"https://api.github.com/users/balaphp/gists{/gist_id}","starred_url":"https://api.github.com/users/balaphp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/balaphp/subscriptions","organizations_url":"https://api.github.com/users/balaphp/orgs","repos_url":"https://api.github.com/users/balaphp/repos","events_url":"https://api.github.com/users/balaphp/events{/privacy}","received_events_url":"https://api.github.com/users/balaphp/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-01-29T07:38:02Z","updated_at":"2016-01-30T02:47:29Z","closed_at":null,"body":"\t\t\tvar Iron = require('iron');\r\n\r\n\t\t\tvar obj = {\r\n\t\t\t    a: 1,\r\n\t\t\t    b: 2,\r\n\t\t\t    c: [3, 4, 5],\r\n\t\t\t    d: {\r\n\t\t\t        e: 'f'\r\n\t\t\t    }\r\n\t\t\t};\r\n\r\n\t\t\tvar password = 'some_not_random_password';\r\n\r\n\t\t\tvar defaults = JSON.parse(JSON.stringify(Iron.defaults));\r\n\r\n\t\t\tdefaults.ttl = 2;\r\n\t\t\tdefaults.timestampSkewSec = 1;\r\n\r\n\t\t\tIron.seal(obj, password, defaults, function (err, sealed) {\r\n\r\n\t\t\t\tconsole.log(\"IRON..\");\r\n\t\t\t    console.log(sealed);\r\n\t\t\t    setTimeout(function(){\r\n\t\t\t    \tIron.unseal(sealed, password, Iron.defaults, function (err, unsealed) {\r\n\t\t\t\t\t\tconsole.log(\"IRON..\");\r\n\t\t\t\t\t\tconsole.log(err);\r\n\t\t\t\t\t    console.log(unsealed);\r\n\t\t\t\t\t});\r\n\t\t\t    },2000);\r\n\r\n\t\t\t});\r\n\r\n\r\nSorry i may be wrong. In this sample it should show error in unseal operation with Iron.defaults. \r\nits showing error if i used  defaults in unseal... "},"comment":{"url":"https://api.github.com/repos/hueniverse/iron/issues/comments/177052658","html_url":"https://github.com/hueniverse/iron/issues/41#issuecomment-177052658","issue_url":"https://api.github.com/repos/hueniverse/iron/issues/41","id":177052658,"user":{"login":"balaphp","id":5578877,"avatar_url":"https://avatars.githubusercontent.com/u/5578877?v=3","gravatar_id":"","url":"https://api.github.com/users/balaphp","html_url":"https://github.com/balaphp","followers_url":"https://api.github.com/users/balaphp/followers","following_url":"https://api.github.com/users/balaphp/following{/other_user}","gists_url":"https://api.github.com/users/balaphp/gists{/gist_id}","starred_url":"https://api.github.com/users/balaphp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/balaphp/subscriptions","organizations_url":"https://api.github.com/users/balaphp/orgs","repos_url":"https://api.github.com/users/balaphp/repos","events_url":"https://api.github.com/users/balaphp/events{/privacy}","received_events_url":"https://api.github.com/users/balaphp/received_events","type":"User","site_admin":false},"created_at":"2016-01-30T02:47:29Z","updated_at":"2016-01-30T02:47:29Z","body":"Yes... the thing is Iron seal operation not including the TTL or timestampSkewSec value in the encryption model. So other side person can able to do the unseal operation successfully with his own parameters. "}}