(Maybe) Add leeway to account for clock skew

Uninett / drf-oidc-auth

OpenID Connect authentication for Django REST Framework

MIT License

0 stars 0 forks source link

(Maybe) Add leeway to account for clock skew #21

Open stveit opened 4 months ago

stveit commented 4 months ago

Kinda turn back the clock on #4 and add back the leeway functionality to account for clock skew, but without also acting as a limit for how old "iat" can be

stveit commented 4 months ago

https://github.com/lepture/authlib/blob/85f9ff99664bbf0a4f0d043ee807aec08f851f3f/authlib/jose/rfc7519/claims.py#L165C4-L165C41

How leeway is supposed to be used