Skip to content

Add leeway config for PyJWT's jwt.decode function - #580

Open
yaourtv wants to merge 1 commit into
mozilla:mainfrom
yaourtv:feat/expose-jwt-decode-leeway
Open

Add leeway config for PyJWT's jwt.decode function#580
yaourtv wants to merge 1 commit into
mozilla:mainfrom
yaourtv:feat/expose-jwt-decode-leeway

Conversation

@yaourtv

@yaourtv yaourtv commented Mar 20, 2026

Copy link
Copy Markdown

This PR adds OIDC_JWT_LEEWAY setting to pass a leeway value to the jwt.decode(leeway=...) function to avoid errors like 'The token is not yet valid (iat)' (#579) on clock skew.

@pepijnolivier

Copy link
Copy Markdown

@akatsoulas

Any chance we could get this one merged in ? 🙏
Adding a bit more leeway helps when the keycloak server time is slightly off from the clock.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants