fix: Leeway config (#568)

marcospereirampj · Jun 4, 2024 · ec1affa · ec1affa
1 parent 210d576
commit ec1affa
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/keycloak/keycloak_openid.py b/src/keycloak/keycloak_openid.py
@@ -548,7 +548,11 @@ def decode_token(self, token, validate: bool = True, **kwargs):
                 key = jwk.JWK.from_pem(key.encode("utf-8"))
                 kwargs["key"] = key
 
+            key = kwargs.pop("key")
+            leeway = kwargs.pop("leeway", 60)
             full_jwt = jwt.JWT(jwt=token, **kwargs)
+            full_jwt.leeway = leeway
+            full_jwt.validate(key)
             return jwt.json_decode(full_jwt.claims)
         else:
             full_jwt = jwt.JWT(jwt=token, **kwargs)