PostgREST / postgrest

REST API for any Postgres database
https://postgrest.org
MIT License
23.46k stars 1.03k forks source link

docs: JWT allowed skew is not documented #3783

Open steve-chavez opened 1 week ago

steve-chavez commented 1 week ago

Problem

We allow a 30 second skew when doing JWT exp validation:

https://github.com/PostgREST/postgrest/blob/f3aa00a8384981baf9076c26b64ccede02bfa365/src/PostgREST/Auth.hs#L85

But this isn't documented anywhere.