[#6529] added default leeway for the id_token checks

This commit is contained in:
Gani Georgiev
2025-02-24 11:43:26 +02:00
parent 653f2d8b16
commit 4155f50fe1
32 changed files with 60 additions and 36 deletions

View File

@@ -1,3 +1,9 @@
## v0.25.8
- Added a default leeway of 5 minutes for the Apple/OIDC `id_token` timestamp claims check to account for clock-skew ([#6529](https://github.com/pocketbase/pocketbase/issues/6529)).
It can be further customized if needed with the `PB_ID_TOKEN_LEEWAY` env variable (_the value must be in seconds, e.g. "PB_ID_TOKEN_LEEWAY=60" for 1 minute_).
## v0.25.7
- Fixed `@request.body.jsonObjOrArr.*` values extraction ([#6493](https://github.com/pocketbase/pocketbase/discussions/6493)).