From 03c5b69f474609dc320fe31af56bfe8f281a8d68 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B8rn=20Dybvik=20Langfors?= <bdl@digdir.no>
Date: Mon, 11 Mar 2024 20:00:10 +0100
Subject: [PATCH] Allow for 2 seconds clock skew in token validation

---
 .../Common/Authentication/AuthenticationBuilderExtensions.cs    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Digdir.Domain.Dialogporten.WebApi/Common/Authentication/AuthenticationBuilderExtensions.cs b/src/Digdir.Domain.Dialogporten.WebApi/Common/Authentication/AuthenticationBuilderExtensions.cs
index 10bc708b5..52e17c184 100644
--- a/src/Digdir.Domain.Dialogporten.WebApi/Common/Authentication/AuthenticationBuilderExtensions.cs
+++ b/src/Digdir.Domain.Dialogporten.WebApi/Common/Authentication/AuthenticationBuilderExtensions.cs
@@ -38,7 +38,7 @@ public static IServiceCollection AddDialogportenAuthentication(
                     ValidateAudience = false,
                     RequireExpirationTime = true,
                     ValidateLifetime = true,
-                    ClockSkew = TimeSpan.Zero
+                    ClockSkew = TimeSpan.FromSeconds(2)
                 };
 
                 options.Events = new JwtBearerEvents