fix: lower jwt clock skew from 5min to 30s

IvanJosipovic · Jun 20, 2023 · d7df3fa · d7df3fa
1 parent 6072fd9
commit d7df3fa
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/oidc-guard/Program.cs b/src/oidc-guard/Program.cs
@@ -55,10 +55,12 @@ public static void Main(string[] args)
             o.NonceCookie.Name = settings.CookieName;
             o.ResponseType = OpenIdConnectResponseType.Code;
             o.SaveTokens = settings.SaveTokensInCookie;
+            o.TokenValidationParameters.ClockSkew = TimeSpan.FromSeconds(30);
         })
         .AddJwtBearer(o =>
         {
             o.MetadataAddress = settings.OpenIdProviderConfigurationUrl;
+            o.TokenValidationParameters.ClockSkew = TimeSpan.FromSeconds(30);
             o.TokenValidationParameters.ValidateAudience = settings.ValidateAudience;
             o.TokenValidationParameters.ValidateIssuer = settings.ValidateIssuer;
             o.TokenValidationParameters.ValidIssuers = settings.ValidIssuers;