See https://issues.jboss.org/browse/KEYCLOAK-3586. The JavaScript adapter is broken in 2.2.0.

On 20 September 2016 at 13:06, Andy Yar <andyyar66@gmail.com> wrote:

Hello,

I've recently faced strange issues having an authed user on JS frontend calling a backend service with bearer token. After a certain number of requests the backend started to return 401. This lasted only for a short period of time and then went back to 200, then 401 again and again.

This seemed to me like there was a delta between server time/client time. However, both systems are synced.

So I've tried to log the JS Keycloak timeSkew attribute. After a few requests it simply increased itself. After ~40 requests its values rose from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased.

It seems wrong to me, since documentation mentions it should be a simple delta between client and server time.

Am I doing something really wrong here?

Thanks

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user