express-jwt
express-jwt copied to clipboard
Support clock skew
- Does the lib support clock skew? So I could validate the JWT by adding small leeway for nbf.
- Does the clock skew should always be handled in validation side, not issue side?
1 - not explicitly that I'm aware of 2 - the clock skew is typically done at the receiving end (how it looks in java)
It is actually supported via the 'clockTolerance' option. All options are are delegated to https://github.com/auth0/node-jsonwebtoken which implements this skew feature.