[keycloak-user] Accumulating time skew - JS at 2.2.0.Final

[Andy Yar]

Hello,
I've recently faced strange issues having an authed user on JS frontend
calling a backend service with bearer token. After a certain number of
requests the backend started to return 401. This lasted only for a short
period of time and then went back to 200, then 401 again and again.

This seemed to me like there was a delta between server time/client time.
However, both systems are synced.

So I've tried to log the JS Keycloak timeSkew attribute. After a few
requests it simply increased itself. After ~40 requests its values rose
from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased.

It seems wrong to me, since documentation mentions it should be a simple
delta between client and server time.

Am I doing something really wrong here?

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160920/36b09ac1/attachment.html