Skip to content

Comments

Adjust Default Values for Clock Skew Config Options#2010

Merged
bhazen merged 1 commit intomainfrom
beh/adjust-default-allowed-clock-skew
May 9, 2025
Merged

Adjust Default Values for Clock Skew Config Options#2010
bhazen merged 1 commit intomainfrom
beh/adjust-default-allowed-clock-skew

Conversation

@bhazen
Copy link
Contributor

@bhazen bhazen commented May 9, 2025

What issue does this PR address?
Per some internal discussion it will be better to keep the default value of our JwtValidationClockSkew in line with the Wilson default and let users adjust as needed. Because we're keeping that as a higher default, there's not a reason to keep it aligned wit the same setting in the DPoP configuration so that setting is being adjusted back to its original value as well.

Important: Any code or remarks in your Pull Request are under the following terms:

If You provide us with any comments, bug reports, feedback, enhancements, or modifications proposed or suggested by You for the Software, such Feedback is provided on a non-confidential basis (notwithstanding any notice to the contrary You may include in any accompanying communication), and Licensor shall have the right to use such Feedback at its discretion, including, but not limited to the incorporation of such suggested changes into the Software. You hereby grant Licensor a perpetual, irrevocable, transferable, sublicensable, nonexclusive license under all rights necessary to incorporate and use your Feedback for any purpose, including to make and sell any products and services.

(see our license, section 7)

@bhazen bhazen self-assigned this May 9, 2025
@bhazen bhazen requested a review from josephdecock as a code owner May 9, 2025 19:36
@bhazen bhazen added the area/products/is IdentityServer label May 9, 2025
@bhazen bhazen merged commit 594f01f into main May 9, 2025
19 checks passed
@bhazen bhazen deleted the beh/adjust-default-allowed-clock-skew branch May 9, 2025 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/products/is IdentityServer

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants