AstralTransRocketries/drasl
1
0
Fork 0
mirror of https://github.com/unmojang/drasl.git synced 2025-08-03 02:46:03 -04:00
Code Issues Packages Projects Releases Wiki Activity

OIDC: increase allowed clock skew from 5s to 1m

Browse Source 
Other systems [1] allow a skew of 5 minutes, so 1 minute doesn't seem
unreasonable.

[1] https://blog.logto.io/troubleshooting-invalid-issued-at-time-error

For https://github.com/unmojang/drasl/issues/166
This commit is contained in:
Evan Goode 2025-04-13 17:38:13 -04:00
parent 3c5a3b59ed
commit 21aca475d5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
main.go
View File

@ -518,7 +518,7 @@ func setup(config *Config) *App {
scopes := []string{"openid", "email"}
for _, oidcConfig := range config.RegistrationOIDC {
options := []rp.Option{
rp.WithVerifierOpts(rp.WithIssuedAtOffset(5 * time.Second)),
rp.WithVerifierOpts(rp.WithIssuedAtOffset(1 * time.Minute)),
rp.WithHTTPClient(MakeHTTPClient()),
rp.WithSigningAlgsFromDiscovery(),
}