[keycloak-user] Accumulating time skew - JS at 2.2.0.Final

Stian Thorgersen sthorger at redhat.com
Wed Sep 21 03:00:52 EDT 2016


Working on fix now and will release a 2.2.1 shortly

On 21 September 2016 at 08:45, Andy Yar <andyyar66 at gmail.com> wrote:

> Oh, ok. Thanks for your answer.
>
> On Wed, Sep 21, 2016 at 8:21 AM, Stian Thorgersen <sthorger at redhat.com>
> wrote:
>
>> See https://issues.jboss.org/browse/KEYCLOAK-3586. The JavaScript
>> adapter is broken in 2.2.0.
>>
>> On 20 September 2016 at 13:06, Andy Yar <andyyar66 at gmail.com> wrote:
>>
>>> Hello,
>>> I've recently faced strange issues having an authed user on JS frontend
>>> calling a backend service with bearer token. After a certain number of
>>> requests the backend started to return 401. This lasted only for a short
>>> period of time and then went back to 200, then 401 again and again.
>>>
>>> This seemed to me like there was a delta between server time/client
>>> time. However, both systems are synced.
>>>
>>> So I've tried to log the JS Keycloak timeSkew attribute. After a few
>>> requests it simply increased itself. After ~40 requests its values rose
>>> from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased.
>>>
>>> It seems wrong to me, since documentation mentions it should be a simple
>>> delta between client and server time.
>>>
>>> Am I doing something really wrong here?
>>>
>>> Thanks
>>>
>>> _______________________________________________
>>> keycloak-user mailing list
>>> keycloak-user at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160921/6494e08b/attachment-0001.html 


More information about the keycloak-user mailing list