IdentityPython / oidc-op

An implementation of an OIDC Provider (OP)
Apache License 2.0
64 stars 26 forks source link

valid access token passes introspection but fails at userinfo #210

Open melanger opened 1 year ago

melanger commented 1 year ago

I have an access token which is valid (according to database and introspection) but userinfo rejects it at the same time.

The error message is coming from here: https://github.com/IdentityPython/oidc-op/blob/2f81e246ff9ef412f5dc786cd2cfa5dd5fccf9e1/src/oidcop/oidc/userinfo.py#L131-L138

It might be a misalignment of different time formats or time zones.