Skip to content

Commit

Permalink
Update documentation to change the allowed id token time skew
Browse files Browse the repository at this point in the history
  • Loading branch information
Mardaneus86 committed Jan 4, 2024
1 parent 4b214e9 commit c488707
Showing 1 changed file with 17 additions and 1 deletion.
18 changes: 17 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -619,7 +619,7 @@ AppAuthConfiguration appAuthConfig = new AppAuthConfiguration.Builder()

ID Token validation was introduced in `0.8.0` but not all authorization servers or configurations support it correctly.

- For testing environments [setSkipIssuerHttpsCheck](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L129) can be used to bypass the fact the issuer needs to be HTTPS.
- For testing environments [setSkipIssuerHttpsCheck](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L143) can be used to bypass the fact the issuer needs to be HTTPS.

```java
AppAuthConfiguration appAuthConfig = new AppAuthConfiguration.Builder()
Expand All @@ -635,6 +635,22 @@ AuthorizationRequest authRequest = authRequestBuilder
.build();
```

- To change the default allowed time skew of 10 minutes for the issue time, [setAllowedIssueTimeSkew](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L159) can be used.

```java
AppAuthConfiguration appAuthConfig = new AppAuthConfiguration.Builder()
.setAllowedIssueTimeSkew(THIRTY_MINUTES_IN_SECONDS)
.build()
```

- For testing environments [setSkipIssueTimeValidation](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L151) can be used to bypass the issue time validation.

```java
AppAuthConfiguration appAuthConfig = new AppAuthConfiguration.Builder()
.setSkipIssueTimeValidation(true)
.build()
```

## Dynamic client registration

AppAuth supports the
Expand Down

0 comments on commit c488707

Please sign in to comment.