Merge pull request datakaveri#181 from tanvi029/jwt-leeway

jwt-leeway-added
ananjaykumar2 · Sep 4, 2024 · ae1e71e · ae1e71e
2 parents 1e6fe50 + 8c3d744
commit ae1e71e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/src/main/java/iudx/file/server/authenticator/AuthenticationVerticle.java b/src/main/java/iudx/file/server/authenticator/AuthenticationVerticle.java
@@ -59,6 +59,7 @@ public void start() {
               JWTAuthOptions jwtAuthOptions = new JWTAuthOptions();
               jwtAuthOptions.addPubSecKey(
                   new PubSecKeyOptions().setAlgorithm("ES256").setBuffer(cert));
+              jwtAuthOptions.getJWTOptions().setLeeway(JWT_LEEWAY_TIME);
               /*
                * Default jwtIgnoreExpiry is false. If set through config, then that value is taken
                */
@@ -67,7 +68,7 @@ public void start() {
                       ? false
                       : config().getBoolean("jwtIgnoreExpiry");
               if (jwtIgnoreExpiry) {
-                jwtAuthOptions.getJWTOptions().setIgnoreExpiration(true);
+                jwtAuthOptions.getJWTOptions().setIgnoreExpiration(true).setLeeway(JWT_LEEWAY_TIME);
                 LOGGER.warn(
                     "JWT ignore expiration set to true,"
                         + "do not set IgnoreExpiration in production!!");

diff --git a/src/main/java/iudx/file/server/common/Constants.java b/src/main/java/iudx/file/server/common/Constants.java
@@ -53,4 +53,6 @@ public class Constants {
               ITEM_TYPE_RESOURCE_GROUP,
               ITEM_TYPE_RESOURCE_SERVER,
               ITEM_TYPE_PROVIDER));
+  public static final int JWT_LEEWAY_TIME = 30;
+
 }