We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent d129ea9 commit f00e379Copy full SHA for f00e379
app/forms/openid_connect_token_form.rb
@@ -128,7 +128,7 @@ def validate_aud_claim(payload)
128
def validate_iat(payload)
129
return true unless payload.key?('iat')
130
iat = payload['iat']
131
- return true if iat.is_a?(Integer) && (iat.to_i - ISSUED_AT_LEEWAY_SECONDS) < Time.zone.now.to_i
+ return true if iat.is_a?(Numeric) && (iat.to_i - ISSUED_AT_LEEWAY_SECONDS) < Time.zone.now.to_i
132
133
errors.add(:client_assertion, t('openid_connect.token.errors.invalid_iat'))
134
end
0 commit comments