[keycloak-user] Accumulating time skew - JS at 2.2.0.Final

Stian Thorgersen sthorger at redhat.com
Wed Sep 21 02:21:24 EDT 2016


See https://issues.jboss.org/browse/KEYCLOAK-3586. The JavaScript adapter
is broken in 2.2.0.

On 20 September 2016 at 13:06, Andy Yar <andyyar66 at gmail.com> wrote:

> Hello,
> I've recently faced strange issues having an authed user on JS frontend
> calling a backend service with bearer token. After a certain number of
> requests the backend started to return 401. This lasted only for a short
> period of time and then went back to 200, then 401 again and again.
>
> This seemed to me like there was a delta between server time/client time.
> However, both systems are synced.
>
> So I've tried to log the JS Keycloak timeSkew attribute. After a few
> requests it simply increased itself. After ~40 requests its values rose
> from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased.
>
> It seems wrong to me, since documentation mentions it should be a simple
> delta between client and server time.
>
> Am I doing something really wrong here?
>
> Thanks
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160921/94b70968/attachment.html 


More information about the keycloak-user mailing list