canvas-lms/lib/canvas/security
wdransfield bf4aaae0ed Add "future buffer" to iat validation for client credentials grant
Closes PLAT-4157

Test Plan:
Attempt to retrieve an access token using a client credentials
grant. The iat of the claimshould be 10 seconds in the future.
Verify you are still able to retrieve an access token.

Verify you cannot retrieve an access token if the iat is more than
30 seconds in the future.

Change-Id: I884f569c3ab4bcafaaa459c70fe3d0c2326153cd
Reviewed-on: https://gerrit.instructure.com/178477
Reviewed-by: Marc Phillips <mphillips@instructure.com>
QA-Review: Marc Phillips <mphillips@instructure.com>
Tested-by: Jenkins
Product-Review: Weston Dransfield <wdransfield@instructure.com>
2019-01-18 17:54:58 +00:00
..
jwt_validator.rb Add "future buffer" to iat validation for client credentials grant 2019-01-18 17:54:58 +00:00
services_jwt.rb refactor and impove DynamicSettings 2017-09-12 22:34:21 +00:00