External auth fails with "invalid nonce" depending on server timezone

mrellipse / toucan

Boilerplate template using Vue.js, TypeScript and .NET Core 2.1, based on SOLID design principles

MIT License

212 stars 36 forks source link

Closed bjammin closed 6 years ago

bjammin commented 6 years ago

It seems the time in the issued nonce is in UTC, but this is being compared against the local time by ExternalAuthController.

Proposed fix: ExternalAuthController.cs

if (nonce.Created.AddMinutes(30) < DateTime.UtcNow)

Sorry for raising this as an issue, I'm not sure if you're open to pull requests.

mrellipse commented 6 years ago

coded a fix. will include in deployment for next release