mirror of
https://github.com/unmojang/drasl.git
synced 2025-08-03 19:06:04 -04:00
OIDC: increase allowed clock skew from 5s to 1m
Other systems [1] allow a skew of 5 minutes, so 1 minute doesn't seem unreasonable. [1] https://blog.logto.io/troubleshooting-invalid-issued-at-time-error For https://github.com/unmojang/drasl/issues/166
This commit is contained in:
parent
52a7df7a1b
commit
99a021bde9
2
main.go
2
main.go
@ -518,7 +518,7 @@ func setup(config *Config) *App {
|
||||
scopes := []string{"openid", "email"}
|
||||
for _, oidcConfig := range config.RegistrationOIDC {
|
||||
options := []rp.Option{
|
||||
rp.WithVerifierOpts(rp.WithIssuedAtOffset(5 * time.Second)),
|
||||
rp.WithVerifierOpts(rp.WithIssuedAtOffset(1 * time.Minute)),
|
||||
rp.WithHTTPClient(MakeHTTPClient()),
|
||||
rp.WithSigningAlgsFromDiscovery(),
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user