Kyon147 / laravel-shopify

A full-featured Laravel package for aiding in Shopify App development
MIT License
353 stars 102 forks source link

Implement leeway for nbf and iat in session token #147

Closed stidges closed 1 year ago

stidges commented 1 year ago

Lately I've increasingly been running into token expiration errors caused by the not before / issued at being before the server clock time. This PR implements the same leeway as for token expiration for the not before / issued at fields. This seems like a safe approach that Shopify also implements in their official PHP package.