Closed paulswartz closed 1 year ago
@paulswartz Good catch.
A test for this would be awesome. We could probably duplicate the retrieve_rs256_with_rotation_test
and remove the rotation parts. Instead we can set the nbf
/ exp
fields to slightly expired valuues and use the clock skew to still make it pass.
@maennchen thank you for the pointer! I ended up using a simpler test example (less to remove!) but let me know if you don't think that works.
Ran into this while trying to use
max_clock_skew
to investigate something else. This didn't appear to be covered by tests, but happy to add them if you can point me in the right direction.