Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-30642

Add a 'leeway' parameter for JWT

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 10.10, 2021.x
    • Fix Version/s: HOTFIX_10.10, 2021.x
    • Component/s: Authentication

      Description

      The ability to configure a leeway window would be useful for Nuxeo installations.

      See this section on the java-jwt project Readme: https://github.com/auth0/java-jwt#time-validation

      Param applies here: https://github.com/nuxeo/nuxeo/blob/master/modules/platform/login/nuxeo-platform-login-jwt/src/main/java/org/nuxeo/ecm/jwt/JWTServiceImpl.java#L197

      Best scenario would have this default to one second and configurable in nuxeo.conf.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              hbrown Harlan Brown
              Participants:
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: