We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 87ece6b commit 315e517Copy full SHA for 315e517
1 file changed
src/Utils/DPop.php
@@ -162,7 +162,8 @@ private function validateDpop($dpop, $request) {
162
163
//error_log("8");
164
// 8. the token was issued within an acceptable timeframe (see Section 9.1), and
165
- $validationData = new ValidationData(); // It will use the current time to validate (iat, nbf and exp)
+ $leeway = 5; // allow 5 seconds clock skew
166
+ $validationData = new ValidationData(time() + $leeway); // It will use the current time to validate (iat, nbf and exp)
167
if (!$dpop->validate($validationData)) {
168
throw new \Exception("token timing is invalid");
169
}
0 commit comments