Hello, I've recently faced strange issues having an authed user on JS frontend calling a backend service with bearer token. After a certain number of requests the backend started to return 401. This lasted only for a short period of time and then went back to 200, then 401 again and again. This seemed to me like there was a delta between server time/client time. However, both systems are synced. So I've tried to log the JS Keycloak timeSkew attribute. After a few requests it simply increased itself. After ~40 requests its values rose from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased. It seems wrong to me, since documentation mentions it should be a simple delta between client and server time. Am I doing something really wrong here? Thanks _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Oh, ok. Thanks for your answer. On Wed, Sep 21, 2016 at 8:21 AM, Stian Thorgersen <sthorger(a)redhat.com&gt; wrote: > See https://issues.jboss.org/browse/KEYCLOAK-3586. The JavaScript > adapter is broken in 2.2.0. > > On 20 September 2016 at 13:06, Andy Yar <andyyar66(a)gmail.com&gt; wrote: > >> Hello, >> I've recently faced strange issues having an authed user on JS frontend >> calling a backend service with bearer token. After a certain number of >> requests the backend started to return 401. This lasted only for a short >> period of time and then went back to 200, then 401 again and again. >> >> This seemed to me like there was a delta between server time/client >> time. However, both systems are synced. >> >> So I've tried to log the JS Keycloak timeSkew attribute. After a few >> requests it simply increased itself. After ~40 requests its values rose >> from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased. >> >> It seems wrong to me, since documentation mentions it should be a simple >> delta between client and server time. >> >> Am I doing something really wrong here? >> >> Thanks >> >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >