All,
Currently, JWTs in Open Zaak are a) valid for 1 hour and b) have no leeway.
This means:
a) Clients can generate a JWT, and use this token for 1 hour. After 1 hour, the token will no longer work and the client needs to generate a new one.
b) Because there is no leeway, if there is some time difference between the client and the server. A token that is valid on the client until 12:00:00 and the client is 5 behind the time the server, the token will no longer be valid at 11:59:55.
The question arose to increase the JWT default duration from 1 hour to 1 day and to increase the default leeway to 5 seconds.
Input and thoughts are appreciated.
Best regards,
Joeri Bekker
--
Maykin Keizersgracht 117, 1015 CJ Amsterdam tel.: +31 (0)20 753 05 23 http://www.maykinmedia.nl