fix: Leeway config (#568)

4 weeks ago · ec1affa1df
1 changed files with 4 additions and 0 deletions
--- a/src/keycloak/keycloak_openid.py
+++ b/src/keycloak/keycloak_openid.py
@ -548,7 +548,11 @@ class KeycloakOpenID:
                key = jwk.JWK.from_pem(key.encode("utf-8"))
                kwargs["key"] = key

+            key = kwargs.pop("key")
+            leeway = kwargs.pop("leeway", 60)
            full_jwt = jwt.JWT(jwt=token, **kwargs)
+            full_jwt.leeway = leeway
+            full_jwt.validate(key)
            return jwt.json_decode(full_jwt.claims)
        else:
            full_jwt = jwt.JWT(jwt=token, **kwargs)