{"action":"created","issue":{"url":"https://api.github.com/repos/keycloak/keycloak/issues/5014","repository_url":"https://api.github.com/repos/keycloak/keycloak","labels_url":"https://api.github.com/repos/keycloak/keycloak/issues/5014/labels{/name}","comments_url":"https://api.github.com/repos/keycloak/keycloak/issues/5014/comments","events_url":"https://api.github.com/repos/keycloak/keycloak/issues/5014/events","html_url":"https://github.com/keycloak/keycloak/pull/5014","id":298378609,"number":5014,"title":"KEYCLOAK-4538 Configurable clock skew when validating tokens","user":{"login":"OskarsPakers","id":3343347,"avatar_url":"https://avatars1.githubusercontent.com/u/3343347?v=4","gravatar_id":"","url":"https://api.github.com/users/OskarsPakers","html_url":"https://github.com/OskarsPakers","followers_url":"https://api.github.com/users/OskarsPakers/followers","following_url":"https://api.github.com/users/OskarsPakers/following{/other_user}","gists_url":"https://api.github.com/users/OskarsPakers/gists{/gist_id}","starred_url":"https://api.github.com/users/OskarsPakers/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OskarsPakers/subscriptions","organizations_url":"https://api.github.com/users/OskarsPakers/orgs","repos_url":"https://api.github.com/users/OskarsPakers/repos","events_url":"https://api.github.com/users/OskarsPakers/events{/privacy}","received_events_url":"https://api.github.com/users/OskarsPakers/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-02-19T19:20:34Z","updated_at":"2018-02-20T08:09:27Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/keycloak/keycloak/pulls/5014","html_url":"https://github.com/keycloak/keycloak/pull/5014","diff_url":"https://github.com/keycloak/keycloak/pull/5014.diff","patch_url":"https://github.com/keycloak/keycloak/pull/5014.patch"},"body":"KEYCLOAK-4538 Feature to tolerate a configurable amount of seconds of clock skew when validating tokens"},"comment":{"url":"https://api.github.com/repos/keycloak/keycloak/issues/comments/366897063","html_url":"https://github.com/keycloak/keycloak/pull/5014#issuecomment-366897063","issue_url":"https://api.github.com/repos/keycloak/keycloak/issues/5014","id":366897063,"user":{"login":"OskarsPakers","id":3343347,"avatar_url":"https://avatars1.githubusercontent.com/u/3343347?v=4","gravatar_id":"","url":"https://api.github.com/users/OskarsPakers","html_url":"https://github.com/OskarsPakers","followers_url":"https://api.github.com/users/OskarsPakers/followers","following_url":"https://api.github.com/users/OskarsPakers/following{/other_user}","gists_url":"https://api.github.com/users/OskarsPakers/gists{/gist_id}","starred_url":"https://api.github.com/users/OskarsPakers/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OskarsPakers/subscriptions","organizations_url":"https://api.github.com/users/OskarsPakers/orgs","repos_url":"https://api.github.com/users/OskarsPakers/repos","events_url":"https://api.github.com/users/OskarsPakers/events{/privacy}","received_events_url":"https://api.github.com/users/OskarsPakers/received_events","type":"User","site_admin":false},"created_at":"2018-02-20T08:09:27Z","updated_at":"2018-02-20T08:09:27Z","author_association":"NONE","body":"According to JWT spec:\r\n```\r\n4.1.5.  \"nbf\" (Not Before) Claim\r\n\r\n   The \"nbf\" (not before) claim identifies the time before which the JWT\r\n   MUST NOT be accepted for processing.  The processing of the \"nbf\"\r\n   claim requires that the current date/time MUST be after or equal to\r\n   the not-before date/time listed in the \"nbf\" claim.  Implementers MAY\r\n   provide for some small leeway, usually no more than a few minutes, to\r\n   account for clock skew.  Its value MUST be a number containing a\r\n   NumericDate value.  Use of this claim is OPTIONAL.\r\n```\r\nIt is silly that once keycloaks clock is a second in the future then it treats id_token which has nbf specified  as invalid."}}
{"actor":{"display_login":"OskarsPakers"}}