On: Hacking a Virtual Power Plant

[thewisenerd]

> not only was I no longer able to mint my own API tokens, the legitimate ones I’d initially generated still worked

can someone explain what's meant by this? i presume the private key identified by the author still works, but will stop working after 7 days?

(based on the sample JWT in the first section, the expiry time of the token seems to be 7 days)