Skip to content

Commit 72f61e6

Browse files
committed
fix: fix token clock skew issue
1 parent b43409e commit 72f61e6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

packages/toolbox-core/src/toolbox_core/auth_methods.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ def _update_cache(new_token: str) -> None:
7171
# verify_oauth2_token not only decodes but also validates the token's
7272
# signature and claims against Google's public keys.
7373
# It's a synchronous, CPU-bound operation, safe for async contexts.
74-
claims = id_token.verify_oauth2_token(new_token, Request())
74+
claims = id_token.verify_oauth2_token(new_token, Request(), clock_skew_in_seconds=60)
7575

7676
expiry_timestamp = claims.get("exp")
7777
if not expiry_timestamp:

0 commit comments

Comments
 (0)