arpadf78

Results 6 comments of arpadf78

Consider accounting for clock skew for nbf claim

@loren-coding Yep, same problem. I missed that report. But this is a bug, you cannot simply compare NBF in a distributed system. And server synchronization is only part of the...

Consider accounting for clock skew for nbf claim

"As a workaround for your envirinment, you can configure a custom [OAuth2TokenCustomizer](https://docs.spring.io/spring-authorization-server/reference/core-model-components.html#oauth2-token-customizer) to change the nbf claim. The nbf claim defaults to iat, so you can change the nbf claim...

Consider accounting for clock skew for nbf claim

Yes, my problem is solved using the OAuth2TokenCustomizer, but I would argue - as already mentioned in the original post - simply comparing the NBF without considering for time drift...

Consider accounting for clock skew for nbf claim

@loren-coding Yep, same problem. I missed that report. But this is a bug, you cannot simply compare NBF in a distributed system. And server synchronization is only part of the...

Consider accounting for clock skew for nbf claim

"As a workaround for your envirinment, you can configure a custom [OAuth2TokenCustomizer](https://docs.spring.io/spring-authorization-server/reference/core-model-components.html#oauth2-token-customizer) to change the nbf claim. The nbf claim defaults to iat, so you can change the nbf claim...

Consider accounting for clock skew for nbf claim

Yes, my problem is solved using the OAuth2TokenCustomizer, but I would argue - as already mentioned in the original post - simply comparing the NBF without considering for time drift...