expired id

main.py

@@ -167,15 +167,28 @@ def getLoginUrl(state, nonce):
 
 
 def decodeIdToken(id_token, nonce):
+
+    try:
         # Verify token signature
         decoded_id_token = jwt.decode(
             id_token, PUBLIC_KEY, algorithms=["RS256"], audience=CLIENT_ID
         )
+    except jwt.ExpiredSignatureError:
+        return 'Token expired', 401
+    except jwt.InvalidAudienceError:
+        return 'Invalid audience', 401
+    except jwt.InvalidIssuerError:
+        return 'Invalid issuer', 401
+    except jwt.InvalidSignatureError:
+        return 'Invalid signature', 401
+    except:
+        return 'Invalid token', 401
 
     # Verify nonce to prevent replay attacks
     if decoded_id_token.get("nonce") != nonce:
         return
 
+    print(decoded_id_token)
     return decoded_id_token