You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
JWT exp value is set to "now + 1 hour" unlike all the other Universal SDKs #65
The JWTs created by this SDK have their exp value set to "now +1 hour", but all the other Universal SDK libraries use "now +5 minutes". Duo has recently begun enforcing that exp values more than 1 hour in the future will be rejected. which means if the server clock is even 1 second ahead of Duo's, auths will fail.
Expected Behavior
JWT exp times should be set to "now +5 minutes" to be consistent with the other SDKs.
Activity
AaronAtDuo commentedon Aug 25, 2026
Will be fixed by #66
AaronAtDuo commentedon Sep 14, 2026
Was fixed by #66