From ec1affa1dff75dd80812bdde1112c16639522eab Mon Sep 17 00:00:00 2001
From: Wouter Claeys <wouter.claeys@vlaanderen.be>
Date: Tue, 4 Jun 2024 22:10:33 +0200
Subject: [PATCH] fix: Leeway config (#568)

---
 src/keycloak/keycloak_openid.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/keycloak/keycloak_openid.py b/src/keycloak/keycloak_openid.py
index 0c14709..0955e20 100644
--- a/src/keycloak/keycloak_openid.py
+++ b/src/keycloak/keycloak_openid.py
@@ -548,7 +548,11 @@ class KeycloakOpenID:
                 key = jwk.JWK.from_pem(key.encode("utf-8"))
                 kwargs["key"] = key
 
+            key = kwargs.pop("key")
+            leeway = kwargs.pop("leeway", 60)
             full_jwt = jwt.JWT(jwt=token, **kwargs)
+            full_jwt.leeway = leeway
+            full_jwt.validate(key)
             return jwt.json_decode(full_jwt.claims)
         else:
             full_jwt = jwt.JWT(jwt=token, **kwargs)